Information Security Specialist

ERM Placement Services; Ernakulam; On-site; INR 700,000 - 1,000,000; Full time

Job summary

ERM Placement Services in India is seeking an Information Security Specialist with 3-5 years of consultancy experience to implement ISMS policies and drive security awareness. The role covers risk reviews, phishing tests, and vulnerability remediation in collaboration with an IT team.

The candidate will design and monitor learning modules, manage access controls, VPNs, and security software, and produce MIS reports for management.

Qualifications

• 3-5 years of experience in Information Security within consultancy services.
• ISO 27001:2022 internal auditor certification is preferred.
• ISO 31000 internal auditor certification is preferred.
• Experience with third-party risk management (TPRM) and contract reviews.
• Strong analytical and problem-solving abilities and excellent communication.

Responsibilities

• Policy & Compliance: Develop and implement ISMS policies and procedures.
• Learning Management: Design, monitor, and enhance security awareness modules.
• Risk & Compliance: Conduct contract reviews and manage TPRM processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the team.
• Phishing & Threat Management: Execute phishing tests and monitor progress.
• Access & Software Management: Handle software installations, VPN access, email IDs, and admin rights requests with proper documentation.
• SOC: Monitor and send SOC alerts while maintaining records.
• Reporting & Analysis: Prepare MIS reports for IT.

Skills

Information security

ISMS

Risk management

Analytical thinking

Communication

Tools

ServiceNow

Learning Management

Patch Management

Job description

Responsibilities and Duties:

• Policy & Compliance: Develop and implement Information Security Management System (ISMS) policies and procedures.
• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare Management Information System (MIS) reports for the IT team.

Qualifications & Skills:

• Experience: 3-5 years in Information Security Management within consultancy services.
• *Certifications: ISO 27001:2022 & ISO 31000 Internal auditor certification.*
• Technical Expertise: Preferred experience with ServiceNow, Learning Management, and Patch Management (Banks/NBFIs/Consultancy).
• Analytical & Problem-Solving: Strong ability to assess risks and implement solutions.
• Communication: Excellent verbal and written skills for effective collaboration.
• Organized & Methodical: Attention to detail with a structured approach to security management.