Information Security Officer

Prognova Partners; Coimbatore District; On-site; INR 900,000 - 1,250,000; Full time

Job summary

Prognova Partners is seeking an Information Security Officer to develop, implement, and maintain the organization’s information security framework from Coimbatore. The role focuses on cybersecurity, risk management, ISO 27001 compliance, GDPR, audits, incident response, and secure business operations across systems and applications.

The candidate will lead security policy development, risk assessments, and training while coordinating with IT and business teams to deploy effective controls.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3–5 years of experience in Information Security, Cybersecurity, or IT Risk Management.
• Strong knowledge of ISO 27001, GDPR, DPIAs, and privacy regulations.

Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct security risk assessments, vulnerability assessments, and compliance reviews.
• Monitor, investigate, and respond to cybersecurity incidents and security breaches.
• Ensure compliance with ISO/IEC 27001:2022, GDPR, and applicable data privacy regulations.
• Coordinate internal and external security audits and ensure timely closure of audit findings.
• Review ERP applications, workflows, and integrations to ensure security and privacy compliance.
• Collaborate with IT and business teams to implement appropriate security controls.
• Maintain security documentation, risk registers, incident reports, and compliance records.
• Develop and deliver information security awareness and training programs.
• Support disaster recovery and business continuity planning and testing.
• Monitor emerging cybersecurity threats and recommend security improvements.

Skills

Network security

Endpoint security

Cloud security

Identity & Access Management

ISO 27001

Risk assessments

GDPR & data privacy

Incident response

Audits & compliance

Regulatory knowledge

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Job description

Job Title: Information Security Officer (ISO)

Location: Coimbatore (Work From Office)

Experience: 3–5 Years

Job Type: Full-Time

Role Overview

The Information Security Officer (ISO) will be responsible for developing, implementing, and maintaining the organization's information security framework. The role focuses on cybersecurity, risk management, ISO 27001 compliance, GDPR, security audits, incident response, and ensuring secure business operations across systems and applications.

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct security risk assessments, vulnerability assessments, and compliance reviews.
• Monitor, investigate, and respond to cybersecurity incidents and security breaches.
• Ensure compliance with ISO/IEC 27001:2022, GDPR, and applicable data privacy regulations.
• Coordinate internal and external security audits and ensure timely closure of audit findings.
• Review ERP applications, workflows, and integrations to ensure security and privacy compliance.
• Collaborate with IT and business teams to implement appropriate security controls.
• Maintain security documentation, risk registers, incident reports, and compliance records.
• Develop and deliver information security awareness and training programs.
• Support disaster recovery and business continuity planning and testing.
• Monitor emerging cybersecurity threats and recommend security improvements.

Required Skills

• Strong knowledge of cybersecurity principles and information security best practices.
• Experience with network security, endpoint security, cloud security, and Identity & Access Management (IAM).
• Hands-on experience with ISO 27001, risk assessments, compliance management, and internal audits.
• Strong understanding of GDPR, data protection principles, DPIAs, and privacy regulations.
• Experience in incident response, vulnerability management, and security monitoring.
• Good understanding of regulatory compliance and audit processes.
• Strong analytical, communication, leadership, and problem-solving skills.
• Ability to manage multiple security initiatives and collaborate across teams.
• Technical understanding of cloud environments (AWS, Azure, GCP) and security tools.

Preferred Skills

• Experience reviewing ERP systems and integrations for security and data protection compliance.
• Familiarity with Norwegian privacy regulations is an added advantage.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3–5 years of experience in Information Security, Cybersecurity, or IT Risk Management.

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)