Website:
sboss.net.in
Job details:
Job Title: Information Security LeadDepartment: IT
Location: Worli
Job Summary
We are looking for an experienced Information Security Lead to manage technology risk, security audits, compliance initiatives, and governance activities. The role involves leading IT security assessments, strengthening internal controls, conducting ISMS audits, and ensuring alignment with global security standards.
Key Responsibilities
- Independently execute technology audits covering Cybersecurity, Data Privacy, Business Continuity, IT General & Application Controls, Network & DMZ Security, and Enterprise Architecture.
- Evaluate control design and operating effectiveness.
- Conduct IT security audits aligned with ISO 27001, NIST, PCI DSS, and other relevant frameworks.
- Perform risk assessments and impact analysis; recommend mitigation strategies.
- Create, review, and maintain IT security policies, SOPs, and audit documentation.
- Conduct ISMS audits and maintain audit checklists and evidence records.
- Work closely with the VAPT team to review findings and track remediation.
- Develop queries/scripts to extract data for audit and control testing (as required).
Required Qualifications
- Bachelor’s degree in IT, Information Security, or related field.
- 6+ years of experience in Information Security / IT Audit / Risk Management.
- Strong knowledge of ISO 27001, NIST, PCI DSS, ITGC, and risk assessment methodologies.
- Experience conducting ISMS audits.
Preferred Certifications
- CISA (preferred)
- ISO 27001 Lead Auditor (preferred)
- CISSP / CISM (added advantage)
Click on Apply to know more.