RABWIN INDUSTRIES PRIVATE LIMITED
Website:
rabwin.com
Job details:
Company Description RABWIN Industries Private Limited is a certified manufacturer holding ISO 9001:2015, ISO 14001:2015, OHSMS 45001:2018, and IATF 16949:2016 accreditations. The company produces precision metal parts for sectors such as switchgear, pumps, valves, machine tools, textiles, railways, and general engineering. By partnering with casting, forging, heat treatment, and surface treatment suppliers, RABWIN offers a one-stop solution to its customers. With over 25 years of experience, the company serves customers in more than 20 countries, emphasizing quality, reliability, and long-term partnerships.
Role Description
- Maintaining Information Security Management System (ISMS) documents, policies, procedures, work instructions, and records as per ISO/IEC 27001:2022 requirements.
- Supporting ISO/IEC 27001 internal, external, surveillance, and certification audits by preparing audit evidence, maintaining compliance records, and closing audit observations.
- Assisting in conducting information security risk assessments, maintaining the Risk Register, and monitoring Risk Treatment Plans (RTP).
- Managing user access, account creation, modification, periodic access reviews, and revocation based on the Access Control Policy and the Principle of Least Privilege.
- Monitoring antivirus, endpoint protection, firewall logs, email security, VPN logs, system logs, and security events to ensure compliance with information security requirements.
- Maintaining the Information Asset Register, asset classification records, ownership details, and supporting the IT asset lifecycle management process.
- Maintaining the Statement of Applicability (SoA), compliance records, monitoring logs, and ISMS documentation.
- Coordinating information security incident reporting, maintaining the Incident Register, tracking corrective actions, and supporting incident investigations.
- Supporting vulnerability assessments, penetration testing (VAPT), security patch management, and remediation activities.
- Assisting in Business Continuity (BCP) and Disaster Recovery (DR) planning, backup verification, and disaster recovery testing.
- Coordinating information security awareness programs, employee training sessions, and phishing awareness campaigns.
- Monitoring compliance with information security policies, standards, legal requirements, and customer security requirements.
- Maintaining security documentation, audit reports, meeting minutes, compliance registers, and management review records.
- Coordinating with IT, HR, Admin, and business departments to ensure effective implementation and continual improvement of the Information Security Management System (ISMS).
- Performing any other information security and compliance-related responsibilities assigned by the management.
Qualifications
- Strong understanding of Information Security Management Systems (ISMS), risk assessment, and compliance frameworks (e.g., ISO/IEC 27001).
- Ability to develop, review, and maintain information security policies, procedures, and documentation.
- Experience coordinating or supporting internal audits, incident management, and corrective action tracking.
- Proficiency in using standard office and documentation tools to analyze data, prepare reports, and present findings.
- Excellent communication and interpersonal skills to collaborate with technical and non-technical stakeholders.
- Attention to detail, strong analytical and problem-solving skills, and a structured approach to managing tasks.
- Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field; relevant certifications (such as ISO 27001 Lead Auditor/Implementer) are an advantage.
- Prior experience in a manufacturing or industrial environment is beneficial, along with familiarity with quality and safety management standards.
Click on Apply to know more.