Information Security Specialist

ERM Placement Services; New Delhi; On-site; INR 900,000 - 1,500,000; Full time

Job summary

ERM Placement Services invites an Information Security professional to lead ISMS policy development and risk management. The role focuses on security governance, awareness training, and third‑party risk oversight within a consultancy context.

You will implement controls, conduct audits, and collaborate with IT teams to strengthen the firm’s information security posture while ensuring regulatory compliance and operational resilience.

Qualifications

• 3–5 years of experience in Information Security Management within consultancy services.
• ISO 27001:2022 and ISO 31000 Internal Auditor certifications.
• Experience with ServiceNow, Learning Management, and Patch Management.
• Strong analytical and problem-solving abilities to assess risks and implement solutions.
• Excellent verbal and written communication for effective collaboration.
• Organized and methodical, with attention to detail in security governance.

Responsibilities

• Develop and implement ISMS policies and procedures.
• Design, monitor, and enhance security awareness learning modules.
• Conduct contract reviews and manage Third-Party Risk Management processes.
• Track and resolve exploitable vulnerabilities with the security team.
• Execute phishing tests and monitor firm‑wide progress.
• Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests with proper documentation.
• Monitor SOC alerts and maintain records for the teams.
• Prepare MIS reports for the IT team.

Skills

InfoSec management

ISO 27001

ISO 31000

Patch management

Learning management

Risk assessment

Communication

Tools

ServiceNow

Job description

Responsibilities and Duties:

• Policy & Compliance: Develop and implement Information Security Management System (ISMS) policies and procedures.
• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare Management Information System (MIS) reports for the IT team.

Qualifications & Skills:

• Experience: 3-5 years in Information Security Management within consultancy services.
• *Certifications: ISO 27001:2022 & ISO 31000 Internal auditor certification.*
• Technical Expertise: Preferred experience with ServiceNow, Learning Management, and Patch Management (Banks/NBFIs/Consultancy).
• Analytical & Problem-Solving: Strong ability to assess risks and implement solutions.
• Communication: Excellent verbal and written skills for effective collaboration.
• Organized & Methodical: Attention to detail with a structured approach to security management.