Information Systems Security Officer

Thales Group; Bengaluru; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

Thales Group is seeking a senior Information Security professional in Bengaluru to lead governance, risk & compliance initiatives and manage vulnerabilities across IT infrastructure.

You will coordinate with CERT teams, conduct risk assessments, and drive security improvements while ensuring ISO 27001 compliance and robust reporting.

Qualifications

• Bachelor's degree in CS or IT with relevant information security focus.
• 10-12 years of experience in information security, IT infra or GRC.
• Experience implementing ISO 27001 and ISMS and conducting security audits.

Responsibilities

• Develop and enforce information security policies aligned with group standards.
• Identify and report vulnerabilities across IT infra, endpoints, networks and apps.
• Prepare weekly/monthly vulnerability reports and track remediation progress.
• Conduct security risk assessments and recommend mitigations and controls.
• Coordinate with internal teams and CERT to manage security incidents.
• Monitor cyber threats and communicate relevant updates to employees.
• Perform security audits to ensure ISO 27001 compliance and controls.
• Review privileged access quarterly and track exceptions to closure.
• Assess third-party vendors' security posture and provide guidance for projects.
• Deliver information security awareness training and communications.
• Consolidate security data and maintain monthly dashboards; Power BI and Python preferred.
• Collaborate with global security teams and IT to maintain documentation and action trackers.

Skills

Information Security Governance

Vulnerability Assessment

ISO 27001

Active Directory

Security Incident Management

Privileged Access Management

Security Reporting

ITIL V3/V4

Threat Intelligence

Stakeholder Management

Education

B.Tech CS/IT

Tools

Power BI

Python scripting

Job description

Location: Bangalore, India

Key Responsibilities:

• Develop and enforce information security policies and procedures in alignment with group policies and organizational security standards.
• Identify, assess, prioritize, and report security vulnerabilities across IT infrastructure, endpoints, networks, and applications.
• Prepare and publish weekly and monthly vulnerability reports, tracking remediation progress and outstanding risks.
• Conduct periodic information security risk assessments and recommend appropriate risk mitigation strategies and security controls.
• Coordinate with internal stakeholders and global CERT teams to manage security incidents and ensure timely resolution.
• Monitor emerging cyber threats, security advisories, and CERT digests, and communicate relevant security updates to employees.
• Conduct security audits and compliance assessments, ensuring adherence to ISO 2701 and applicable security requirements.
• Review and reconcile privileged user access quarterly, maintaining the security exception tracker and following up until closure.
• Assess third-party vendors' security posture and provide information security guidance for projects across business units.
• Develop and deliver information security awareness training, communication materials, and employee education initiatives.
• Consolidate security data and maintain monthly reporting dashboards; knowledge of Power BI and Python scripting is preferred.
• Collaborate with global security teams, IT infrastructure, and business stakeholders, maintaining documentation, meeting minutes, and action trackers.

Education & Experience:

• Education: B.Tech. in Computer Science (CS) or Information Technology (IT).
• Experience: 10 - 12 years in information security, cybersecurity, IT infrastructure, or Governance, Risk & Compliance (GRC).

Key Skills & Competencies:

• Information Security Governance, Risk & Compliance (GRC).
• Vulnerability Assessment, Risk-Based Prioritization, and Remediation Tracking.
• ISO 27001, ISMS, Security Audits, and Compliance Management.
• IT Infrastructure, Active Directory, and Endpoint Troubleshooting.
• Security Incident Management and CERT Coordination.
• Privileged Access Management and Security Controls.
• Security Reporting, Data Analysis, and Power BI Dashboards.
• Basic Python Scripting and ITIL V3/V4 Knowledge.
• Security Awareness Training and Threat Intelligence Communication.
• Analytical Thinking, Problem-Solving, Stakeholder Management, and Effective Communication.

Preferred Certifications:

ISO 27001 Lead Auditor, CISM, or CEH. ITIL V3/V4 certification is an added advantage.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.