Job highlights

- ISO 27001 Lead Auditor (IRCA CQI) and CISA certified with hands-on experience in ISO 27001:2022 implementation and audits in BFSI sector
- Lead end-to-end ISO 27001:2022 implementation, conduct risk assessments, internal and external audits, develop ISMS documentation and security policies

Job Summary We are seeking a passionate and skilled Information Security Consultant with hands-on experience in

ISO 27001:2022 implementation and information security audits, particularly in the banking and finance domain. The ideal candidate will possess robust knowledge of cybersecurity frameworks and demonstrate the ability to manage end-to-end compliance projects.

Key Experience & Skills Required:

Proven experience in the implementation of ISO 27001:2022 for clients, including gap assessments, risk treatment plans, and ISMS documentation.

Hands-on experience in conducting risk assessments and information security audits onsite at client location (internal and external).

Experience in comprehensive IS audits specifically within the Banking, Financial Services and

Insurance(BFSI) sector.

Strong background in developing, reviewing, and maintaining information security policies,

procedures, and SOPs.

Familiarity with industry-recognized cybersecurity standards and frameworks such as:

- NIST Cybersecurity Framework (CSF)
- ISO 27001: 2022 standard
- RBI CSF, ITGRC, Outsourcing services master directions
- IRDAI Cyber Security Guidelines
- SEBI CSCRF
- UIDAI Guidelines
- SOC 1 / SOC 2 Type 1/ Type 2
- Digital Personal Data Protection (DPDP) Rules




- Other relevant circulars, guidelines, and regulatory frameworks.

Excellent communication, documentation, and interpersonal skills, with the ability to clearly convey technical information to stakeholders at all levels.• Ability to manage multiple assignments independently while maintaining quality and timelines.
- Ability to prepare detailed Audit checklists and reports as per the scope mentioned for the

project.

Mandatory Certification:

ISO 27001 Lead Auditor certification (IRCA CQI Certified) and CISA certification (ISACA).

Key Responsibilities:

Lead and manage end-to-end implementation of ISO 27001:2022, including scoping, risk assessments, and creation of ISMS documentation.

Perform risk identification, assessment, and treatment in accordance with ISO 27001 and organizational context.

Plan and conduct internal audits, external audit, and deliver IT security awareness and training sessions onsite at client location.

Should have conduct audit based on Banking, Insurance, Aadhaar, SEBI Guidelines onsite at client location.

Develop and maintain audit checklists, detailed audit reports, and corrective action plans.

Design, review, and update information security policies, procedures, and process-related documentation in line with applicable standards and business requirements.

Support ongoing maintenance and continuous improvement of the Information Security

Management System (ISMS).

Coordinate with stakeholders and clients to ensure timely and effective execution of audit and compliance tasks

📌 Infosec Consultant ( Compliance) (Kolkata)
🏢 agility human resource management services
📍 Kolkata