Hiring for DPDPA, ISO 27001, CERT-In & CIS-Bangalore Location in IT MNC.
We are looking for experienced Cyber Security to join our team. Candidates with relevant experience and immediate or short joining availability are encouraged to apply, please email your updated resume to
[email protected] for further consideration.
Apply now or tag someone who would be a great fit!
: Senior Consultant / Lead Consultant DPDPA, ISO 27001, CERT-In & CIS
Job Title: Senior Consultant / Lead Consultant Information Security, Privacy & Compliance
Location Bangalore
Saturday and Sunday Week offs
No Hybrid
Job Summary
We are seeking an experienced Information Security and Privacy professional to support and lead compliance, governance, risk management, and security assurance initiatives. The candidate will be responsible for driving Digital Personal Data Protection Act (DPDPA) compliance, ISO 27001:2022 implementation and audit readiness, CERT-In compliance requirements, CIS security assessments, risk management programs, and security governance activities across the organization.
The role requires robust stakeholder management skills and the ability to work closely with leadership teams, legal, technology, privacy, audit, and business stakeholders.
Key Responsibilities
DPDPA & Privacy Compliance
- Lead DPDPA compliance assessments, gap analyses, and remediation programs.
- Support the Data Protection Officer (DPO) in privacy governance activities.
- Develop and review privacy policies, consent notices, privacy notices, data retention schedules, and data processing procedures.
- Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
- Define and track privacy compliance metrics and reporting.
- Support implementation of consent management and data subject rights processes.
- Manage personal data breach assessment and notification activities.
ISO 27001:2022
- Lead ISO 27001 implementation, maintenance,
and continual improvement activities.
- Conduct ISMS risk assessments and risk treatment planning.
- Develop and maintain information security policies, standards, procedures, and guidelines.
- Coordinate internal audits, management reviews, and certification audits.
- Monitor compliance with ISO 27001 controls and organizational requirements.
- Drive corrective actions and closure of audit observations.
CERT-In Compliance
- Ensure compliance with applicable CERT-In directions and reporting requirements.
- Support security incident management and cyber incident reporting.
- Coordinate with SOC, IT, and business teams during security incidents.
- Establish and maintain incident response procedures and evidence management processes.
- Support cyber crisis and incident response exercises.
CIS Controls & Security Assessments
- Conduct CIS Controls maturity assessments and gap assessments.
- Develop remediation roadmaps aligned with CIS Controls v8.
- Track implementation status and risk reduction initiatives.
- Coordinate vulnerability management, configuration reviews, and control effectiveness assessments.
- Prepare executive dashboards and security maturity reports.
Governance, Risk & Compliance (GRC)
- Perform risk assessments and compliance reviews.
- Maintain risk registers, treatment plans, and compliance trackers.
- Support third-party risk management assessments.
- Drive awareness programs and security training initiatives.
- Prepare reports and presentations for senior management and audit committees.
Required Skills
Mandatory
- Strong experience in DPDPA compliance and privacy governance.
- Hands-on experience with ISO 27001:2022 implementation and audits.
- Experience in CERT-In compliance and incident management processes.
- Experience conducting CIS Controls assessments and security gap assessments.
- Knowledge of risk management frameworks and security governance.
- Experience drafting security, privacy, and compliance policies.
- Strong documentation, reporting, and communication skills.
- Experience interacting with auditors, regulators, and senior management.
Preferred Certifications
- ISO 27001 Lead Implementer and/or Lead Auditor.
- CDPSE, CIPP, CIPM, or equivalent privacy certifications.
- CISSP, CISA, CRISC, or CEH.
- DPDPA-related certification or privacy training.
- ISO 27701 Lead Implementer (preferred).
Education
- Bachelors degree in engineering, Computer Science, Information Technology, Cyber Security, or related discipline.
- Master's degree or relevant security/privacy certifications preferred.
Key Competencies
- Stakeholder Management
- Leadership & Team Coordination
- Risk-Based Decision Making
- Policy Development
- Audit Management
- Incident Response Coordination
- Analytical & Problem-Solving Skills
- Executive Communication & Reporting
Desired Certifications
- ISO/IEC 27001:2022 Lead Auditor
- ISO/IEC 27001:2022 Lead Implementer
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified in Risk and Information Systems Control (CRISC)
Candidates with relevant experience and skills as mentioned above are requested to share your updated resume to
[email protected] We kindly request you to include the below mentioned details in your CV/email while sharing it with us.
Total Exp and Relevant Exp: - Current Company: Current CTC: Expected CTC: Current Location:
Notice Period
📌 Hiring For ISO - DPDPA Bangalore Location in IT MNC (Bangalore Rural)
🏢 IT MNC
📍 Bangalore Rural