Information Security & Compliance – Junior

Job Location: Chakala,Mumbai, Maharashtra
Department: Information Security & Compliance
Experience Required: Minimum 2 Years
Job Type: Full-Time

We are looking for a motivated Information Security & Compliance professional to join our Mumbai office and support our global information security, governance, risk and compliance operations.

Job Summary

The ideal candidate will have at least 2 years of relevant experience in Information Security, Governance, Risk & Compliance (GRC), IT Compliance or Risk Management.

The role involves managing day-to-day information security and compliance activities, supporting ISO 27001 and ISO 27701 programmes, conducting vendor risk assessments, maintaining compliance documentation and assisting with security audits.

The selected candidate will collaborate with global teams and have opportunities for professional growth.

Key Responsibilities

1. Information Security & Compliance

- Support the implementation and maintenance of ISO 27001 and ISO 27701 standards.
- Maintain information security policies, procedures and compliance documentation.
- Assist with internal and external information security audits.
- Track audit findings, corrective actions and compliance improvements.
- Maintain risk registers and compliance records.

2. Vendor Risk Management

- Conduct vendor and third-party security risk assessments.
- Review vendor SOC 2 reports and ISO certifications.
- Evaluate current vendors against company security requirements.
- Identify security risks and escalate concerns when required.

3. Data Privacy & Regulatory Compliance

- Support data privacy operations and information security requests.
- Maintain compliance with applicable privacy regulations, including GDPR and CCPA.
- Complete client security questionnaires and online security assessments.
- Assist with information security and data privacy tickets.

4. Risk Management & Security Awareness

- Identify, document and monitor information security risks.




- Support cybersecurity awareness and employee training programmes.
- Coordinate with internal teams to review Disaster Recovery (DR) practices.
- Monitor emerging cybersecurity threats and recommend appropriate mitigation measures.

5. Stakeholder Coordination

- Collaborate with internal stakeholders and global information security teams.
- Provide guidance on information security and compliance requirements.
- Support continuous improvement of security processes and controls.

Required Qualifications & Skills

- Minimum 2 years of experience in Information Security, GRC, IT Compliance or Risk Management.
- Working knowledge of ISO 27001, ISO 27701 and SOC 2.
- Understanding of information security governance, risk assessments and compliance processes.
- Familiarity with data privacy regulations such as GDPR and CCPA.
- Experience or exposure to security audits, compliance documentation and vendor risk assessments.
- Good knowledge of Microsoft Office applications, including Excel, Word, PowerPoint and Outlook.
- Strong analytical, organisational and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to coordinate with stakeholders across different teams and regions.

Preferred Qualifications

- Degree in Information Technology, Computer Science, Cybersecurity, Information Systems or a related field.
- Candidates with a software development background, knowledge of SDLC and an interest in transitioning into cybersecurity may also be considered.
- Hands-on experience with ISO 27001 audits or certification processes.
- CISSP certification or willingness to pursue CISSP certification within 1–2 years.

Ideal Candidate

We are looking for someone who is detail-oriented, proactive, eager to learn and interested in building a long-term career in Information Security and Compliance.

The candidate should be comfortable managing multiple responsibilities, working independently and collaborating with international teams.

Pay: ₹50,000.00 - ₹60,000.00 per month

Work Location: In person

📌 Information Security & Compliance (Andheri East)
🏢 Thema Corporate Services
📍 Andheri East