- Own ISO 27001:2022 and SOC 2 Type II, from implementation to audit handling
- Run VAPT and manage remediation through to closure
- Lead incident investigations and RCA, and report on them clearly
- Implement and maintain ISMS policies across access control, cloud security, threat intelligence and asset management
- Take full ownership of InfoSec activities, drive continuous improvements and build security awareness across the company
???? ????
- 3 to 5 years of hands-on experience in core information security
- Proven ISO 27001 and SOC 2 Type II experience: implementation, continuous monitoring and auditor coordination
- Hands-on VAPT experience (penetration testing and vulnerability scanning)
- Robust working knowledge of security tools across cloud security (AWS or Azure), IAM and endpoint protection
- Solid background in incident response, forensic investigation and RCA
- Excellent written and spoken English
- Able to join within 15 days
???? ?? ????
- Certifications such as CEH, CISSP, CISA, ISO 27001 Lead Implementer or Auditor, or AWS/Azure security certifications
- Exposure to SaaS security, container and Kubernetes security, and CI/CD security
- Familiarity with GDPR and other privacy frameworks