Senior Information Security Specialist

Location - Jakkur (Yehalanka) | 5 days working from office

Immediate Joiner preferred

Job Summary :

We are seeking a skilled and proactive Information Security Specialist to join our Internal IT team. This role will be pivotal in developing, streamlining, and maintaining the organization’s Information Security Management System (ISMS) and leading the implementation of ISO 27001 standards and the regulations that the business needs to comply with, like GDPR, DPDP Act. The ideal candidate will have a strong understanding of information security frameworks, risk management, and compliance requirements.

Key Responsibilities :

• Lead the development, implementation, and maintenance of the organization’s ISMS in alignment with ISO 27001 standards.
• Conduct gap analysis and risk assessments to identify vulnerabilities and recommend mitigation strategies.
• Collaborate with cross-functional teams to define and document security policies, procedures, and controls.
• Drive ISO 27001 certification readiness, including internal audits, corrective actions, and continuous improvement initiatives.
• Monitor compliance with internal security policies and external regulatory requirements.
• Provide training and awareness programs to employees on information security best practices.
• Stay updated with the latest security trends, threats, and technologies to ensure proactive risk management.
• Support incident response planning and execution, including post-incident analysis and reporting.
• Maintain documentation and evidence required for audits and certification processes.
• Develop and maintain a risk register and ensure timely mitigation of identified risks.
• Coordinate with external auditors and consultants during certification and
• surveillance audits.
• Evaluate and implement security tools and technologies to enhance the organization’s security posture.
• Perform regular vulnerability assessments and penetration testing coordination.
• Ensure secure configuration and hardening of IT infrastructure and applications.
• Support data classification and data protection initiatives across the organization.

Desired Profile :

able to operate autonomously in a dynamic environment