Job Description :
Work on projects related to Information Security Management System (ISO 27001 : 2022) certification.
Conduct ISO 27001 : 2022 internal audits and comprehensive gap assessments.
Execution of Cybersecurity Infrastructure Security (CIS) assessments.
Develop and implement internal Standard Operating Procedures (SOPs), policies, and guidelines for access management and information security.
Conduct ISO 27001 : 2022-readiness assessments and address the findings therein.
Ensure Client's compliance with ISO 27001 : 2022 requirements and the Statement of Applicability (SOA).
Prepare Root Cause Analyses (RCAs) for audit findings and implement appropriate remediation plans.
Plan and conduct external ISO audits.
Define and maintain continuous compliance frameworks to protect organizational assets.
Utilize proven experience to prevent security breaches while allowing routine business activities to proceed without interruption.
Hands-on management of information security incidents, including social engineering, email phishing, malware attacks, and more.
Perform Cyber Maturity Reviews and Risk Assessments to identify vulnerabilities and propose enhancements
Required Technical Skills
Bachelor's degree in information technology or preferably a Postgraduate with Certification in ISO 27001
Professional certification in ISO 27001 : 2022 Lead Auditor or Lead Implementer.
Professional certifications such as CISSP, CISM, CISA, or equivalent.
Proven experience in managing ISMS and obtaining ISO 27001 : 2022 certification.
Strong understanding of information security principles and risk management.
Excellent communication, coordination, and project management skills.
Knowledge of the latest cybersecurity threats and trends.
Senior Consultant • Mumbai, MH, India