Information Systems Security Officer

Thales; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Thales Group in Bengaluru seeks an experienced Information Security professional to lead governance, risk, and compliance activities across IT infrastructure and applications. The role focuses on vulnerability assessment, incident coordination with CERT teams, and ensuring ISO 27001 adherence.

Responsibilities include policy enforcement, risk assessments, vendor security posture reviews, and security awareness training.

Qualifications

• B.Tech. in Computer Science (CS) or Information Technology (IT).
• 10–12 years of experience in information security, cybersecurity, IT infrastructure, or GRC.

Responsibilities

• Develop and enforce information security policies aligned with group policies and security standards.
• Identify, assess, prioritize, and report security vulnerabilities across IT infrastructure, endpoints, networks, and applications.
• Prepare and publish weekly and monthly vulnerability reports, tracking remediation progress and risks.
• Conduct periodic information security risk assessments and recommend appropriate risk mitigation strategies and controls.
• Coordinate with internal stakeholders and global CERT teams to manage security incidents and ensure timely resolution.
• Monitor emerging cyber threats, advisories, and CERT digests, and communicate updates to employees.
• Conduct security audits and compliance assessments, ensuring ISO 27001 adherence.
• Review privileged user access quarterly and maintain the security exception tracker.
• Assess third-party vendors' security posture and provide guidance for projects across business units.
• Develop and deliver information security awareness training and communications.

Skills

GRC

Vulnerability assessment

ISO 27001

Active Directory

Security incident management

Privileged access management

Power BI dashboards

Python scripting

Security reporting

Communication

Education

B.Tech. in CS or IT

Tools

Power BI

Active Directory

Job description

Location: Bangalore, India
Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust. Present in India since 1953, Thales is headquartered in Noida and has other operational offices and sites spread across Delhi, Gurugram, Bengaluru and Mumbai, among others. Over 2200 employees are working with Thales and its joint ventures in India. Since the beginning, Thales has been playing an essential role in India’s growth story by sharing its technologies and expertise in Defence, Aerospace and Cyber & Digital sectors. Thales has two engineering competence centres in India - one in Noida focused on Cyber & Digital business, while the one in Bengaluru focuses on hardware, software and systems engineering capabilities for both the civil and defence sectors, serving global needs. The Group has also established an MRO (Maintenance, Repair & Overhaul) facility in Gurugram to provide comprehensive avionics maintenance and repair services to Indian airlines and support the growth of the local aviation industry.

Key Responsibilities:

• Develop and enforce information security policies and procedures in alignment with group policies and organizational security standards.
• Identify, assess, prioritize, and report security vulnerabilities across IT infrastructure, endpoints, networks, and applications.
• Prepare and publish weekly and monthly vulnerability reports, tracking remediation progress and outstanding risks.
• Conduct periodic information security risk assessments and recommend appropriate risk mitigation strategies and security controls.
• Coordinate with internal stakeholders and global CERT teams to manage security incidents and ensure timely resolution.
• Monitor emerging cyber threats, security advisories, and CERT digests, and communicate relevant security updates to employees.
• Conduct security audits and compliance assessments, ensuring adherence to ISO 27001 and applicable security requirements.
• Review and reconcile privileged user access quarterly, maintaining the security exception tracker and following up until closure.
• Assess third-party vendors' security posture and provide information security guidance for projects across business units.
• Develop and deliver information security awareness training, communication materials, and employee education initiatives.
• Consolidate security data and maintain monthly reporting dashboards; knowledge of Power BI and Python scripting is preferred.
• Collaborate with global security teams, IT infrastructure, and business stakeholders, maintaining documentation, meeting minutes, and action trackers.

Education & Experience:

• Education: B.Tech. in Computer Science (CS) or Information Technology (IT).
• Experience: 10 - 12 years in information security, cybersecurity, IT infrastructure, or Governance, Risk & Compliance (GRC).

Key Skills & Competencies:

• Information Security Governance, Risk & Compliance (GRC).
• Vulnerability Assessment, Risk-Based Prioritization, and Remediation Tracking.
• ISO 27001, ISMS, Security Audits, and Compliance Management.
• IT Infrastructure, Active Directory, and Endpoint Troubleshooting.
• Security Incident Management and CERT Coordination.
• Privileged Access Management and Security Controls.
• Security Reporting, Data Analysis, and Power BI Dashboards.
• Basic Python Scripting and ITIL V3/V4 Knowledge.
• Security Awareness Training and Threat Intelligence Communication.
• Analytical Thinking, Problem-Solving, Stakeholder Management, and Effective Communication.

Preferred Certifications:

ISO 27001 Lead Auditor, CISM, or CEH. ITIL V3/V4 certification is an added advantage.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.