: Information Security Manager

Company: Kapstone Technological Services

Job Location: Navi Mumbai, Maharashtra

Experience Required: 3–5 Years

Employment Type: Full-Time

About the Role

Kapstone Technological Services is looking for a skilled and proactive Information Security Manager to oversee information security governance, risk management, compliance, and technical security operations.

The ideal candidate will have practical experience in ISO 27001:2022 implementation, Information Security Management Systems (ISMS), security risk assessments, audit management, vulnerability management, and security controls. The candidate should be capable of combining governance and compliance responsibilities with hands-on technical security activities to strengthen the organization's overall security posture.

Key Responsibilities1. Information Security Governance, Risk & Compliance (GRC)

- Implement, maintain, and continuously improve the ISO 27001:2022 Information Security Management System (ISMS).
- Conduct information security risk assessments, gap analyses, and risk treatment planning.
- Maintain risk registers, Statements of Applicability (SoA), security policies, procedures, and compliance documentation.
- Coordinate internal and external audits, certification readiness, evidence collection, and corrective action tracking.
- Ensure alignment with applicable security frameworks and standards, including ISO 27001, NIST CSF, SOC 2, and PCI DSS, wherever relevant.
- Identify compliance gaps and coordinate remediation activities with the responsible teams.
- Prepare risk reports, compliance dashboards, and security status updates for management.
- Conduct third-party and vendor security risk assessments and monitor identified risks.

1. Technical Information Security

- Conduct or coordinate vulnerability assessments, security reviews, and remediation activities.
- Identify security weaknesses and work with IT teams to implement appropriate corrective measures.
- Support security incident identification, investigation, response, root-cause analysis, and reporting.
- Review and strengthen access controls, identity and access management, endpoint security, network security, and data protection practices.




- Assist with security monitoring and SIEM-related activities, where applicable.
- Coordinate vulnerability scanning, patch management, and secure configuration reviews.
- Evaluate the effectiveness of existing security controls and recommend improvements.
- Support business continuity planning, disaster recovery, and information security risk mitigation initiatives.
- Promote security awareness training and phishing simulation exercises to improve employee awareness.

1. Audit & Documentation Management

- Prepare and maintain information security policies, procedures, risk registers, control documentation, and audit evidence.
- Support ISO 27001 certification and surveillance audits.
- Coordinate with auditors, clients, and internal stakeholders to address compliance requirements.
- Track audit findings, assign remediation owners, and monitor closure within agreed timelines.
- Maintain records of security incidents, risk assessments, corrective actions, and compliance activities.

1. Stakeholder & Client Coordination

- Collaborate with IT, HR, Operations, management, and other departments to implement information security controls.
- Support client security assessments, compliance reviews, and information security questionnaires.
- Communicate security risks, compliance gaps, and remediation plans to relevant stakeholders.
- Coordinate with cross-functional teams to ensure security requirements are incorporated into business processes.
- Provide regular updates on security risks, audit progress, and compliance status.

Required Skills & Qualifications
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- 3–5 years of relevant experience in Information Security, Cybersecurity, GRC, or ISMS implementation.
- Hands-on knowledge of ISO 27001:2022 implementation, risk assessments,



security controls, and audit preparation.
- Understanding of information security governance, risk management, compliance requirements, and security best practices.
- Familiarity with vulnerability assessment, incident management, access control, endpoint security, and network security.
- Knowledge of ISO 27005, NIST Cybersecurity Framework, SOC 2, and PCI DSS is preferred.
- Familiarity with GRC platforms, vulnerability scanning tools, SIEM solutions, or security monitoring tools is an advantage.
- Strong analytical, problem-solving, documentation, and communication skills.
- Ability to coordinate with technical teams, management, auditors, and clients.
- Strong organizational skills with the ability to manage multiple security and compliance activities.

Preferred Certifications
- ISO 27001 Lead Implementer
- ISO 27001 Lead Auditor
- CompTIA Security+
- Certified Information Systems Security Skilled (CISSP)
- Certified Information Security Manager (CISM)
- Certified in Risk and Information Systems Control (CRISC)

Relevant certifications are preferred but not mandatory for candidates with strong practical experience. Ideal Candidate Profile The ideal candidate should:
- Have experience in both GRC and technical information security.
- Understand ISO 27001:2022 implementation and audit requirements.
- Be capable of identifying security risks and coordinating remediation.
- Have experience preparing compliance documentation and maintaining security controls.
- Demonstrate ownership, attention to detail, and a proactive approach to information security.
- Be comfortable collaborating with internal teams, external auditors, and clients.

How to Apply Interested candidates who meet the above requirements can share their updated resumes using the contact details below.

Contact Person: Fatima

Email: [email protected]

Contact Number: (phone hidden)

Subject Line: Application – Information Security Manager

We look forward to connecting with candidates who are passionate about information security, risk management, compliance, and cybersecurity.

Pay: ₹50,000.00 - ₹80,000.00 per month

Work Location: In person

📌 Information Security Manager (Navi Mumbai)
🏢 Kapstone Technological services
📍 Navi Mumbai