Infosec Consultant ( Compliance)

Agility Human Resource Management Services; Dadri, Bengaluru, Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Agility Human Resource Management Services is seeking an Information Security Consultant with hands-on ISO 27001:2022 implementation and audits in the BFSI sector. The role demands strong knowledge of cybersecurity standards, ability to manage end-to-end compliance projects, and excellent communication for stakeholder alignment on security controls.

Responsibilities include leading ISO 27001:2022 implementation, risk assessments, ISMS documentation, and onsite audits at client locations.

Qualifications

• Experience in ISO 27001:2022 implementation for BFSI clients.
• Ability to conduct risk assessments and information security audits onsite.
• Proven ability to develop, review and maintain ISMS policy documentation.

Responsibilities

• Lead end-to-end ISO 27001:2022 implementation including scoping and risk assessments.
• Create ISMS documentation and risk treatment plans.
• Plan and conduct internal and external audits onsite at client locations.
• Prepare audit checklists, reports and corrective action plans.
• Develop, update and maintain information security policies and SOPs.
• Coordinate with stakeholders to ensure timely audit and compliance tasks.

Skills

ISO 27001:2022 implementation

Risk assessments

Audit planning

Information security policies

Stakeholder communication

Education

ISO 27001 Lead Auditor (IRCA)

CISA certification (ISACA)

Job description

Job Summary

We are seeking a passionate and skilled Information Security Consultant with hands‑on experience in ISO 27001:2022 implementation and information security audits, particularly in the banking and finance domain. The ideal candidate will possess strong knowledge of cybersecurity frameworks and demonstrate the ability to manage end‑to‑end compliance projects.

Key Experience & Skills Required:

Proven experience in the implementation of ISO 27001:2022 for clients, including gap assessments, risk treatment plans, and ISMS documentation.

Hands‑on experience in conducting risk assessments and information security audits onsite at client location (internal and external).

Experience in comprehensive IS audits specifically within the Banking, Financial Services and Insurance(BFSI) sector.

Strong background in developing, reviewing, and maintaining information security policies, procedures, and SOPs.

Familiarity with industry‑recognized cybersecurity standards and frameworks such as:

• NIST Cybersecurity Framework (CSF)
• ISO 27001: 2022 standard
• RBI CSF, ITGRC, Outsourcing services master directions
• IRDAI Cyber Security Guidelines
• SEBI CSCRF
• UIDAI Guidelines
• SOC 1 / SOC 2 Type 1/ Type 2
• Digital Personal Data Protection (DPDP) Rules
• Other relevant circulars, guidelines, and regulatory frameworks.

Excellent communication, documentation, and interpersonal skills, with the ability to clearly convey technical information to stakeholders at all levels. Ability to manage multiple assignments independently while maintaining quality and timelines.

• Ability to prepare detailed Audit checklists and reports as per the scope mentioned for the

project.

Mandatory Certification:

ISO 27001 Lead Auditor certification (IRCA CQI Certified) and CISA certification (ISACA).

Key Responsibilities:

Lead and manage end‑to‑end implementation of ISO 27001:2022, including scoping, risk assessments, and creation of ISMS documentation.

Perform risk identification, assessment, and treatment in accordance with ISO 27001 and organizational context.

Plan and conduct internal audits, external audit, and deliver IT security awareness and training sessions onsite at client location.

Should have conduct audit based on Banking, Insurance, Aadhaar, SEBI Guidelines onsite at client location.

Develop and maintain audit checklists, detailed audit reports, and corrective action plans.

Design, review, and update information security policies, procedures, and process‑related documentation in line with applicable standards and business requirements.

Support ongoing maintenance and continuous improvement of the Information Security Management System (ISMS).

Coordinate with stakeholders and clients to ensure timely and effective execution of audit and compliance tasks