GRC Lead- Internal Audit & ISO Implementation

Mobileware Technologies; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Mobileware Technologies in Mumbai is seeking a Lead Information Security role focusing on governance, risk management, and compliance with ISO standards. The Lead will oversee ISMS implementation and coordinate cross-functional teams across approximately 16 departments.

Strong audit, risk assessment, and vendor management experience is required. The position emphasizes leading ISO certification initiatives, remediation, and regulatory interpretation to ensure continuous compliance.

Qualifications

• Strong knowledge of ISO 27001 and ISMS concepts.
• Hands-on internal audit experience.
• Experience in risk assessment, control implementation, and audits.
• Familiar with vendor risk management and third-party compliance.
• Excellent documentation, communication and stakeholder management.
• ISO 27001 Lead Implementer / Lead Auditor certification.

Responsibilities

• Lead ISO certification initiatives and surveillance audits.
• Hands-on ISO27001 implementation and continuous improvement.
• Interpret and apply regulatory and compliance requirements.
• Act as ISMS Coordinator, managing end-to-end ISMS activities.
• Lead and coordinate cross-functional teams (approx. 16 departments).
• Oversee and work on Vendor Risk Assessment.
• Drive risk treatment plans, audit remediation, and compliance reporting.
• Mentor GRC team members and provide strategic guidance.

Skills

ISO 27001

ISMS

Internal Audit

Risk Assessment

Vendor Risk

Stakeholder Mgmt

Lead Auditor cert

Job description

Role & responsibilities

The role focuses on Information Security Governance, Risk Management, and Compliance with global standards, especially ISO frameworks. The Lead role will additionally oversee ISMS implementation and cross-functional coordination.

• Lead ISO certification initiatives and surveillance audits
• Hands-on experience in ISO27001 implementation and continuous improvement
• Interpret and apply regulatory and compliance requirements
• Act as ISMS Coordinator, managing end-to-end ISMS activities
• Lead and coordinate cross-functional teams (approx. 16 departments)
• Oversee and work on Vendor Risk Assessment.
• Drive risk treatment plans, audit remediation, and compliance reporting
• Mentor GRC team members and provide strategic guidance

Required Skills:

• Strong understanding of ISO 27001 / ISMS concepts
• Strong experience in Internal Audit
• Experience in risk assessment, control implementation, and audits
• Knowledge of vendor risk management and third-party compliance
• Excellent documentation, communication, and stakeholder management skills
• ISO 27001 Lead Implementer / Lead Auditor certification