Information Security Specialist

ERM Placement Services; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ERM Placement Services in Hyderabad is seeking an Information Security professional to lead ISMS policy development, risk governance and security operations within a consultancy setting.

You will design security awareness programs, oversee third-party risk reviews, and coordinate vulnerability management with cross-functional teams, ensuring compliance and robust protection.

The role emphasizes analytical thinking, clear communication, and meticulous documentation of security processes.

Qualifications

• 3–5 years of Information Security Management experience in consultancy services.
• ISO 27001:2022 Internal Auditor and ISO 31000 Internal Auditor certifications.
• Experience with risk assessment, policy development, and compliance governance.
• Strong analytical and problem-solving abilities; effective written and verbal communication.
• Organized, methodical, and meticulous in security program administration.

Responsibilities

• Policy & Compliance: Develop and implement ISMS policies and procedures.
• Learning Management: Design, monitor, and enhance security awareness modules.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the team.
• Phishing & Threat Management: Run phishing tests and monitor progress across the firm.
• Access & Software Management: Manage security software, VPN access, and admin rights requests.
• SOC: Monitor and respond to SOC alerts, maintaining proper records.
• Reporting & Analysis: Create MIS reports for the IT team.

Skills

Information Security

Risk Management

Policy & Compliance

Analytical Thinking

Communication

Education

ISO 27001:2022 Internal Auditor

ISO 31000 Internal Auditor

Tools

ServiceNow

Learning Management System

Patch Management

Job description

Responsibilities and Duties:

• Policy & Compliance: Develop and implement Information Security Management System (ISMS) policies and procedures.
• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare Management Information System (MIS) reports for the IT team.

Qualifications & Skills:

• Experience: 3-5 years in Information Security Management within consultancy services.
• *Certifications: ISO 27001:2022 & ISO 31000 Internal auditor certification.*
• Technical Expertise: Preferred experience with ServiceNow, Learning Management, and Patch Management (Banks/NBFIs/Consultancy).
• Analytical & Problem-Solving: Strong ability to assess risks and implement solutions.
• Communication: Excellent verbal and written skills for effective collaboration.
• Organized & Methodical: Attention to detail with a structured approach to security management.