Information Security Risk Manager

Secure Minds; Chennai District; À distance; INR 2 500 000 - 4 000 000; Plein temps

Résumé du poste

Secure Minds seeks an Information Security Risk Manager for a long-term, mostly-remote contract with a global telecom client, based in Chennai, India. You will lead security and data assurance activities—reviews, analysis, and testing—to ensure correct application of information security policies and secure operation of enterprise systems and data.

The role owns cloud security governance across AWS and Azure, security risk assessments, ISMS audits, gap analysis and compliance monitoring for ISO

Qualifications

• CISSP, CISM, CRISC and ISO 27001 Lead Implementer/Auditor certification (or similar) required
• 10+ years in Information Security
• Proven security governance, risk and compliance experience
• Proven IT systems audit experience
• Proven business continuity experience
• Experience leading ISO 27001:2022 certification and surveillance audits
• Experience with cloud security and GRC tools, CASBs, and server virtualization

Responsabilités

• Own security risk assessments and cloud risk identification
• Coordinate ISMS internal and external audits
• Perform gap analysis and compliance monitoring for ISO 27001, PCI DSS and NIS 2
• Oversee third-party security due diligence
• Lead organization-wide security awareness training

Connaissances

CISSP/CISM/CRISC

ISO 27001 Lead

Governance & Compliance

IT audit

Business continuity

Cloud security

GRC tools

Outils

GRC tools

CASBs

Server virtualization

Description du poste

We are hiring an Information Security Risk Manager for a long-term, mostly-remote contract engagement with a global telecom client, based out of Chennai, India. This role leads security and data assurance activities -- reviews, analysis, and testing -- to confirm the correct application of information security policies and the secure operation of enterprise systems and data, with specific ownership of cloud security governance across AWS and Azure.

The role owns security risk assessments, cloud risk identification, ISMS internal and external audit coordination, gap analysis and compliance monitoring across ISO/IEC 27001, PCI DSS and NIS 2, third-party security due diligence, and organization-wide security awareness training. The ideal candidate brings 10+ years in Information Security with CISSP/CISM/CRISC and ISO 27001 Lead Implementer/Auditor certification (or similar), proven ISMS audit leadership, and hands-on GRC and cloud security tooling experience.

Contract JC SM122122

Note: if your application is shortlisted, you will be asked to share a masked Aadhaar card (only the last 4 digits visible) and one passport-size photograph, so our HR team can check for duplicate submissions on the client side before final submission.

Must-have skills

• CISSP / CISM / CRISC and ISO 27001 Lead Implementer or Auditor certification (or similar)
• 10+ years in Information Security
• Proven security governance, risk and compliance experience
• Proven IT systems audit experience
• Proven business continuity experience
• Experience leading ISO 27001:2022 certification and surveillance audits
• Experience with cloud security and GRC tools, CASBs, and server virtualization