Information Security Management Systems (ISMS)

PwC; Bengaluru; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

PwC India in Bengaluru is seeking an experienced Information Security professional to support IT risk and security engagements. The role focuses on implementing and managing ISMS frameworks and coordinating with clients to assess controls.

Candidates should have extensive experience in risk assessments, audits, and knowledge of standards such as NIST, PCI DSS, GDPR and HIPAA. Strong communication and stakeholder management are essential to drive security programs across teams.

Qualifications

• 47 years of experience in Information Security or IT Risk Consulting.
• Experience implementing or managing ISO/IEC 27001-based ISMS.
• Knowledge of security frameworks and regulations (e.g., NIST, PCI DSS, GDPR, HIPAA).
• Experience in risk assessments and internal audits.
• Excellent communication and stakeholder management skills.

Skills

Information Security

Risk assessments

Internal audits

Stakeholder management

Communication

Education

Bachelor's degree in information technology, Computer Science, Cybersecurity, or related field

Tools

ISO 27001

Job description

Required Qualifications

• Bachelor's degree in information technology, Computer Science, Cybersecurity, or related field.
• Minimum47 years of experiencein Information Security or IT Risk Consulting.
• Proven experience in implementing or managing ISO/IEC 27001-based ISMS.
• Strong understanding of security frameworks and regulations (e.g., NIST, PCI DSS, GDPR, HIPAA).
• Experience in conducting risk assessments and internal audits.
• Excellent communication and stakeholder management skills.

Preferred Certifications

• ISO 27001 Lead Implementer / Lead Auditor
• CISA / CISM / CISSP is a plus
• ITIL Foundation or COBIT certification is a plus
• Data Privacy certification (e.g., CIPP/E, CDPSE) is a plus.