- Review, maintain, and document the organization's Information Security Management System (ISMS) policies, procedures, and records.

- Coordinate and drive ISMS initiatives across the organization to ensure alignment with ISO/IEC 27001:2022 requirements.

- Monitor organizational compliance with ISMS policies, procedures, and applicable security standards.

- Prepare and present annual updates on ISMS initiatives, improvements, and compliance status to management.

- Coordinate the implementation of employee information security awareness and training programs.

- Plan and manage internal audits, external audit coordination, management reviews, and corrective and preventive actions within defined timelines.

- Track and facilitate the closure of audit observations, compliance gaps, and non-conformities.

- Follow up on reported security incidents, coordinate root-cause analysis with the ISO team, and share lessons learned across departments.

- Coordinate with respective departments to ensure adherence to established ISMS policies and procedures.

- Collaborate with cross-functional teams to implement security improvements and promote a security-first culture

Requirements

- Minimum 6+ years of experience in information security, information security management, compliance,



or related initiatives.
- Bachelor's or Master's degree in B.E., B.Tech, M.Tech, MS, or MBA, completed through a regular three- or four-year degree program.
- Excellent verbal and written communication skills.
- Expertise in at least five of the following areas:

- ISO/IEC 27001:2022 – Information Security Management System (ISMS)
- ISO/IEC 22301:2019 – Business Continuity Management System (BCMS)
- Risk assessment and gap assessment
- SOX, SOC 1, and SOC 2

- HIPAA and HITRUST

- Internal and external audits

- Policies and procedures review
- Control testing and incident response

- Stakeholder management

- Cybersecurity

- Valuable understanding of privacy laws, governance, risk management, and compliance (GRC).
- Ability to manage cross-functional teams, drive organization-wide security initiatives, and promote a security-first culture.
- Strong understanding of IT infrastructure and security tools, including Windows Active Directory, Microsoft 365, SASE, WAF, firewalls, network and application security, DevSecOps, CI/CD pipeline security, SDLC, IAM, IGA, MFA, application security, RSA Archer, and cloud security across AWS, Azure, GCP, and OCI.

📌 Senior Associate (India)
🏢 MarketScope
📍 India