Information Security Specialist

ERM Placement Services; Ahmedabad District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ERM Placement Services seeks an Information Security Manager to lead ISMS policy development, risk management, and security monitoring for consulting clients. You will design learning modules, oversee third-party risk, and ensure proper documentation.

The role requires 3–5 years of information security management experience in consultancy and certifications ISO 27001:2022 and ISO 31000 Internal Auditor. Strong analytical and communication skills are essential; familiarity with ServiceNow and

Qualifications

• 3–5 years of information security management experience in consultancy services.
• ISO 27001:2022 and ISO 31000 Internal Auditor certifications required.
• Experience with ServiceNow, Learning Management, and Patch Management preferred (Banks/NBFIs/Consultancy).
• Analytical, problem-solving and communication skills essential.
• Organized and methodical approach to security management.

Responsibilities

• Develop and implement ISMS policies and procedures.
• Design, monitor, and enhance learning modules for security awareness.
• Conduct contract reviews and manage Third-Party Risk Management (TPRM).
• Track and resolve exploitable vulnerabilities with the security team.
• Execute phishing tests and monitor firm-wide progress.
• Manage InfoSec software installations, VPN access, and admin rights requests.
• Monitor SOC alerts and maintain records.
• Prepare MIS reports for IT leadership.

Skills

Information Security

ISMS

Policy Development

Risk Management

Threat Monitoring

SOC Operations

Vulnerability Tracking

Communication

Documentation

TPRM

Education

ISO 27001:2022 & ISO 31000 Internal auditor certification

Tools

ServiceNow

Patch Management

Learning Management System

Job description

Responsibilities and Duties:

• Policy & Compliance: Develop and implement Information Security Management System (ISMS) policies and procedures.
• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare Management Information System (MIS) reports for the IT team.

Qualifications & Skills:

• Experience: 3-5 years in Information Security Management within consultancy services.
• *Certifications: ISO 27001:2022 & ISO 31000 Internal auditor certification.*
• Technical Expertise: Preferred experience with ServiceNow, Learning Management, and Patch Management (Banks/NBFIs/Consultancy).
• Analytical & Problem-Solving: Strong ability to assess risks and implement solutions.
• Communication: Excellent verbal and written skills for effective collaboration.
• Organized & Methodical: Attention to detail with a structured approach to security management.