Information Security And Compliance Officer

Eastvantage; Bengaluru; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

Eastvantage Group is seeking an Information Security Compliance Officer to safeguard our global operations by integrating security practices, conducting audits, and driving risk assessments.

The role focuses on ISO 27001, GDPR, PCI-DSS compliance, incident handling, policy development, and coordinating with auditors; Azure Entra and Intune experience is a plus.

Ideal candidates have 5–7 years in security/compliance, a related IT degree, and relevant certifications.

Qualifications

• 5-7 years of experience in Security & Compliance or related field.
• Strong working knowledge of ISO 27001 (mandatory).
• Certifications such as CISM, CompTIA Security+ or related, and/or PCI DSS/NIST experience is advantageous.
• Familiarity with Microsoft Azure environment (Azure Entra, Intune) is advantageous.

Responsibilities

• Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.
• Maintain compliance with certifications such as ISO 27001, PCI-DSS, GDPR; collect evidence and artifacts.
• Prepare for and manage internal and external audits and ensure audit-ready documentation.
• Monitor security, manage security tickets, perform incident and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks in collaboration with IT and business teams.

Skills

Information security

Compliance management

Auditing

Risk assessment

Incident handling

Education

Bachelor's degree in IT or Computer Science

Tools

ISO 27001

PCI-DSS

Azure Entra

Intune Policies

GDPR

Job description

Total years of exp-

Relevant years of exp in information security-

Relevant years of exp in Cyber security-

Current Ctc-

Expected Ctc-

Notice period -

As an Information Security Compliance Officer, you will be responsible for managing and ensuring the organizations information security compliance across all our global operations. Your role will involve collaborating across teams to integrate security practices, conducting regular audits and risk assessments, liaising with external auditors and ensuring compliance to different security frameworks such as ISO 27001, PCI-DSS, GDPR etc. This role requires strong knowledge and experience with ISO:27001, and Data privacy regulations.

Your ability to handle incidents, policy development, threat and vulnerability management, assess IT infrastructure security, will be added advantage. Further any experience on working in Microsoft Azure environments will be very beneficial.

Role & responsibilities

Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.

• Maintain compliance with technical certifications such as ISO 27001, PCI-DSS, GDPR etc. Collect evidence and artifacts to meet compliance requirements.
• Prepare for and manage internal and external audits and ensure all necessary documentation for audit-readiness.
• Monitor security, manage security cases & tickets, perform security incident analysis and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks by liaising with IT and business team.

Preferred candidate profile

Bachelors degree in IT, Computer Science, or a related field

• 5 - 7 years of experience in Security & Compliance, Information security management, or any Cybersecurity related field.
• Strong working knowledge of ISO 27001 (mandatory)
• Security Certifications such as CISM, CompTIA Security + etc. and /or experience with PCI DSS / NIST is advantageous.
• Familiarity with Microsoft environment such as Azure Entra, Intune Policies is advantageous.
• Ability to work well in a team and collaborate effectively with colleagues at all levels. Excellent and effective verbal, written, interpersonal communication and presentation skills.
• Must be highly organized, detail oriented and exhibit a strong sense of professionalism.