Information Security Specialist

ERM Placement Services; Dadri; On-site; INR 900,000 - 1,500,000; Full time

Job summary

ERM Placement Services in India seeks an Information Security Manager with 3–5 years in consultancy to design and enforce ISMS policies, manage risk, and lead security awareness learning.

You will coordinate with teams to monitor vulnerabilities, conduct phishing tests, manage third-party risk, and ensure proper access control, logging, and reporting to IT leadership.

Qualifications

• 3–5 years of information security management experience within consultancy services.
• Certified ISO 27001:2022 Internal Auditor and ISO 31000 Internal Auditor.
• Experience with ServiceNow, Learning Management, and patch management.
• Strong analytical, communication, and organizational skills.
• Ability to assess risks and implement security solutions.

Responsibilities

• Policy & Compliance: Develop and implement ISMS policies and procedures.
• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare MIS reports for the IT team.

Skills

Information Security Management

Third-Party Risk Management

Phishing Testing

Security Policy Development

Communication

Analytical Thinking

Problem Solving

Documentation & Reporting

Education

ISO 27001:2022 Internal Auditor Certification

ISO 31000 Internal Auditor Certification

Tools

ServiceNow

Learning Management System

Patch Management

Job description

Responsibilities and Duties:

• Policy & Compliance: Develop and implement Information Security Management System (ISMS) policies and procedures.
• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare Management Information System (MIS) reports for the IT team.

Qualifications & Skills:

• Experience: 3-5 years in Information Security Management within consultancy services.
• *Certifications: ISO 27001:2022 & ISO 31000 Internal auditor certification.*
• Technical Expertise: Preferred experience with ServiceNow, Learning Management, and Patch Management (Banks/NBFIs/Consultancy).
• Analytical & Problem-Solving: Strong ability to assess risks and implement solutions.
• Communication: Excellent verbal and written skills for effective collaboration.
• Organized & Methodical: Attention to detail with a structured approach to security management.