Infosec Consultant ( Compliance)

Agility Human Resource Management Services; Kolkata District, Chennai District, Greater Noida; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Agility Human Resource Management Services is seeking an Information Security Consultant with hands-on ISO 27001:2022 implementation and information security audit experience, especially in BFSI sectors. The role requires strong knowledge of cybersecurity frameworks and the ability to manage end-to-end compliance projects on client sites.

Mandatory credentials include ISO 27001 Lead Auditor and CISA certifications, with responsibilities spanning scoping, risk assessments, ISMS documentation,

Qualifications

• Experience implementing ISO 27001:2022 for BFSI clients including gap assessments and ISMS documentation.
• Conduct risk assessments and information security audits onsite at client locations (internal and external).
• Develop, review, and maintain information security policies, procedures, and SOPs.

Responsibilities

• Lead end-to-end ISO 27001:2022 implementation including scoping and ISMS documentation.
• Perform risk identification, assessment, and treatment per ISO 27001 and organizational context.
• Plan and conduct internal and external audits and deliver IT security awareness sessions onsite at client locations.

Skills

ISO 27001:2022 implementation

Information security audits

Risk assessment

Policy development

Stakeholder communication

Job description

Job Summary

We are seeking a passionate and skilled Information Security Consultant with hands‑on experience in ISO 27001:2022 implementation and information security audits, particularly in the banking and finance domain. The ideal candidate will possess strong knowledge of cybersecurity frameworks and demonstrate the ability to manage end‑to‑end compliance projects.

Key Experience & Skills Required:

Proven experience in the implementation of ISO 27001:2022 for clients, including gap assessments, risk treatment plans, and ISMS documentation.

Hands‑on experience in conducting risk assessments and information security audits onsite at client location (internal and external).

Experience in comprehensive IS audits specifically within the Banking, Financial Services and Insurance(BFSI) sector.

Strong background in developing, reviewing, and maintaining information security policies, procedures, and SOPs.

Familiarity with industry‑recognized cybersecurity standards and frameworks such as:

• NIST Cybersecurity Framework (CSF)
• ISO 27001: 2022 standard
• RBI CSF, ITGRC, Outsourcing services master directions
• IRDAI Cyber Security Guidelines
• SEBI CSCRF
• UIDAI Guidelines
• SOC 1 / SOC 2 Type 1/ Type 2
• Digital Personal Data Protection (DPDP) Rules
• Other relevant circulars, guidelines, and regulatory frameworks.

Excellent communication, documentation, and interpersonal skills, with the ability to clearly convey technical information to stakeholders at all levels. Ability to manage multiple assignments independently while maintaining quality and timelines.

• Ability to prepare detailed Audit checklists and reports as per the scope mentioned for the

project.

Mandatory Certification:

ISO 27001 Lead Auditor certification (IRCA CQI Certified) and CISA certification (ISACA).

Key Responsibilities:

Lead and manage end‑to‑end implementation of ISO 27001:2022, including scoping, risk assessments, and creation of ISMS documentation.

Perform risk identification, assessment, and treatment in accordance with ISO 27001 and organizational context.

Plan and conduct internal audits, external audit, and deliver IT security awareness and training sessions onsite at client location.

Should have conduct audit based on Banking, Insurance, Aadhaar, SEBI Guidelines onsite at client location.

Develop and maintain audit checklists, detailed audit reports, and corrective action plans.

Design, review, and update information security policies, procedures, and process‑related documentation in line with applicable standards and business requirements.

Support ongoing maintenance and continuous improvement of the Information Security Management System (ISMS).

Coordinate with stakeholders and clients to ensure timely and effective execution of audit and compliance tasks