Cybersecurity and Business Continuity Management Specialist

Infosys; Chennai; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Infosys in Chennai seeks a Cybersecurity & BCM Specialist (APAC) with 3+ years in information security, and proven expertise in IT and OT security environments, including managing an ISO 27001 ISMS.

The role requires auditing and regulatory compliance, strong knowledge of ISO 27001, NIS2 and EU/German cybersecurity rules, plus the ability to draft clear policies, standards and compliance reports. Certifications such as CISM, CISA or ISO 27001 Lead Auditor are a plus.

Qualifications

• At least 3 years of experience in information security with expertise in IT and OT security environments.
• Experience managing an ISO 27001 Information Security Management System (ISMS) is essential.
• Strong auditing and compliance experience with information security and OT security standards.
• Knowledge of ISO 27001 standards, NIS2 regulations, and cybersecurity legislation for IT/OT, especially in European contexts.
• Ability to develop clear written outputs: policies, standards, and compliance reports for IT/OT.
• Certifications such as ISO 27001 Lead Auditor, GICSP, CISM, CISA, CRISC, or willingness to obtain them.

Skills

Information security

ISMS ISO 27001

Auditing & compliance

IT & OT security

Regulatory requirements

Policy writing

English communication

German language (advantage)

Job description

Cybersecurity & BCM Specialist (APAC)

• At least 3 years of experience in information security, with demonstrated expertise in IT and OT security environments. Experience managing an ISO 27001 Information Security Management System (ISMS) is essential.
• Strong experience in auditing and ensuring compliance with information security and OT security standards, including managing complex regulatory requirements.
• Comprehensive knowledge of the latest ISO 27001 standards, NIS2 regulations, and cybersecurity legislation applicable to both IT and OT environments, particularly within European and German contexts.
• Proven ability to develop clear, effective written outputs such as policies, standards, and compliance reports for IT and OT environments.
• Relevant certifications (e.g., ISO 27001 Lead Auditor, GICSP, CISM, CISA, CRISC, or similar) or a willingness to obtain them.
• Strong communication skills in English (written and spoken); proficiency in German is an advantage.
• A structured, self-reliant, and analytical working style, combined with excellent collaboration and stakeholder management skills. A professional, solution-driven, and customer-oriented approach is critical.