Information Security Officer

Thompsons HR Consulting Pvt Ltd; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Thompsons HR Consulting Pvt Ltd is seeking a seasoned cybersecurity professional to lead vulnerability management and regulatory compliance initiatives. The role emphasizes strong collaboration with both technical and non-technical teams to ensure risk-based remediation and alignment with standards such as ISO 27001, NIST, and GDPR.

The candidate should bring expertise in secure development, threat awareness, and a proactive approach to maintain robust security controls and policies across the

Qualifications

• Strong understanding of vulnerability management tools and processes.
• Knowledge of frameworks and regulatory compliance standards, especially ISO27001.
• Expertise in secure development practices and procedures.
• Excellent communication and coordination skills across technical and non-technical teams.
• Ability to prioritise remediation based on risk and business impact.
• Knowledge of risk management standards, methodologies and frameworks.
• Knowledge of cyber threats and cybersecurity controls and solutions.
• Ensure vulnerability management processes comply with internal security policies and external regulatory requirements (e.g., ISO 27001, NIST, GDPR, NIS2).

Skills

Vulnerability management

Regulatory compliance awareness

ISO 27001 knowledge

Secure development practices

Technical and non-technical cross-team

Risk prioritization

Risk management frameworks

Cyber threat knowledge

Cybersecurity controls

Job description

• Strong understanding of vulnerability management tools and processes.
• Knowledge of frameworks and regulatory compliance standards. Especially ISO27001
• Expertise in secure development practices and procedures
• Excellent communication and coordination skills across technical and non-technical teams
• Ability to prioritise remediation based on risk and business impact
• Knowledge of :
• Risk management standards, methodologies and frameworks
• Cyber threats
• Cybersecurity controls and solutions
• Ensure vulnerability management processes comply with internal security policies and external regulatory requirements (e.g., ISO 27001, NIST, GDPR, NIS2 etc).