Information Security Officer

Indutch Composites Technology; Vadodara; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Indutch Composites Technology in Vadodara seeks an ISMS Specialist to coordinate the implementation, maintenance and continual improvement of ISO/IEC 27001:2022 across the organization. You will drive risk assessments, SoA, asset ownership and policy governance.

You will also coordinate VAPT, incident management, access controls, audits and information security awareness programs with IT and business teams, ensuring regulatory compliance and effective governance.

Qualifications

• Practical understanding of ISO/IEC 27001:2022 and ISMS implementation.
• Experience in information security risk assessment, GRC and compliance activities.
• Working knowledge of vulnerability management, VAPT, incident management, access management, security awareness and third-party risk management.
• Experience in supporting internal and external information security audits.

Responsibilities

• Coordinate implementation, maintenance and continual improvement of ISMS per ISO/IEC 27001:2022.
• Maintain information security policies, procedures, standards and ISMS docs.
• Coordinate risk assessments, risk treatment, risk register maintenance and SoA.

Skills

27001 knowledge

ISMS implementation

Risk assessment

GRC

VAPT awareness

Incident management

Access management

Audits experience

Documentation skills

Stakeholder management

Job description

Role & responsibilities

• Coordinate the implementation, maintenance and continual improvement of the organization's ISMS in accordance with ISO/IEC 27001:2022.
• Maintain information security policies, procedures, standards and supporting ISMS documentation.
• Coordinate information security risk assessments, risk treatment activities, risk register maintenance and Statement of Applicability (SoA).
• Coordinate identification, classification and periodic review of information assets and their ownership.
• Monitor implementation and effectiveness of applicable information security controls and coordinate remediation of identified gaps.
• Coordinate Vulnerability Assessment and Penetration Testing (VAPT), including scope definition, review of findings, remediation tracking and re-testing.
• Coordinate the information security incident management process, including incident reporting, investigation, corrective actions and maintaining the incident register.
• Support periodic user access reviews, privileged access reviews and appropriate joiner/mover/leaver controls.
• Coordinate information security assessments of critical suppliers and third parties and monitor remediation of identified risks.
• Develop and coordinate information security awareness and training programmes for employees.
• Maintain applicable information security legal, regulatory and contractual requirements and coordinate compliance activities.
• Support integration of information security requirements into Business Continuity and Disaster Recovery processes.
• Establish and monitor appropriate Information Security KPIs/KRIs and prepare periodic security reports for management.
• Coordinate internal ISMS audits and support external certification/surveillance audits.
• Coordinate closure of audit findings, corrective actions and improvement initiatives.
• Prepare inputs and support the periodic ISMS Management Review.
• Act as the central coordination point between management, IT, business functions and external security/service providers for information security matters.

Preferred candidate profile

• Practical understanding of ISO/IEC 27001:2022 and ISMS implementation.
• Experience in information security risk assessment, GRC and compliance activities.
• Working knowledge of vulnerability management, VAPT, incident management, access management, security awareness and third-party risk management.
• Experience in supporting internal and external information security audits.
• Good documentation, analytical and report-writing skills.
• Ability to coordinate with both technical and non-technical stakeholders.
• Strong communication and stakeholder management skills.