IAMOPS | Growth Fanatics DevOps
Website:
iamops.io
Job details:
Compliance Associate – ISO 27001 Implementation & Information Security
Company: IAMOPS
Location: Pune, India , Surat India
Employment Type: Full-time
Experience: 2–5 Years
We are looking for a Compliance Associate with strong hands-on experience in implementing and maintaining Information Security Management Systems (ISMS) based on ISO 27001 and related security frameworks.
This is an implementation-focused role. We are looking for someone who has practical experience configuring, implementing, documenting, and maintaining ISO 27001 controls—not someone whose primary experience is limited to conducting audits.
Key Responsibilities
- Lead the implementation and continuous improvement of ISO 27001 Information Security Management System (ISMS).
- Design, implement, and maintain security controls aligned with ISO 27001 Annex A requirements.
- Develop, review, and maintain information security policies, procedures, standards, and operational documentation.
- Perform risk assessments, risk treatment planning, and maintain risk registers.
- Coordinate implementation of technical and administrative security controls across cloud and IT environments.
- Work closely with DevOps, Cloud, Infrastructure, and Engineering teams to implement security requirements.
- Implement and maintain compliance with ISO 27701, ISO 42001, NIST Cybersecurity Framework, and GDPR where applicable.
- Support implementation of Identity and Access Management (IAM), Single Sign-On (SSO), privileged access controls, and user access review processes.
- Establish asset management, data classification, information handling, and data protection controls.
- Configure and maintain security documentation, Statement of Applicability (SoA), control registers, and compliance evidence.
- Monitor compliance activities and ensure continuous adherence to implemented security controls.
- Coordinate internal compliance activities and support external certification assessments by preparing documentation and evidence.
- Track non-conformities, corrective actions, preventive actions, and continuous improvement initiatives.
- Conduct vendor security assessments and third-party risk evaluations.
- Deliver security awareness training across the organization.
- Prepare management reports, compliance dashboards, and Management Review Meeting (MRM) documentation.
- Support clients during security implementation projects and provide compliance guidance.
Required Skills
- Strong hands-on experience implementing ISO 27001 controls in production environments.
- Experience building and maintaining an Information Security Management System (ISMS).
- Good understanding of:
- ISO 27001
- ISO 27701
- ISO 42001
- NIST Cybersecurity Framework
- GDPR
Click on Apply to know more.
