ISMS and Compliance Consultant

Vivanti Consulting; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Vivanti Consulting is seeking an experienced Information Security Governance professional to lead our ISO/IEC 27001:2022 program across seven locations. You will drive risk management, ensure SOAs, and maintain governance artifacts in central portals.

The role requires coordinating internal audits, training teams on security awareness, and guiding readiness for future ISO/IEC certifications while reporting progress to executive leadership.

Qualifications

• 5+ years of information security governance, risk and compliance experience.
• Active ISMS management including ISO/IEC 27001 surveillance or recertification.
• Evidence governance with rigorous record-keeping, version control, end-to-end traceability.
• Experience navigating cross-border regulatory environments across AU, UK, US, and India.
• Excellent written communication for auditor- and client-facing documentation.
• Ability to align schedules with Australian working hours (AEST ahead of IST).

Responsibilities

• Oversee ISO/IEC 27001:2022 ISMS across seven global locations, maintain risk registers, Statements of Applicability, documentation workflows, and central portal records.
• Direct remediation workflows: log, monitor, follow up, confirm, and resolve non-conformities end to end, with unbiased validation for external tasks.
• Coordinate audit operations: organize internal review schedules, recertification assessments, documentation packages, and auditor engagement.
• Drive security awareness: deploy training modules and phishing exercises company-wide with detailed completion metrics.
• Manage third-party risk: vendor assessments, risk scores, periodic reviews, and contractual security obligations.
• Maintain proposal assets: author responses for client security evaluations and update the centralized knowledge repository.
• Spearhead compliance growth: readiness efforts for ISO/IEC 42001, ISO 9001, and SOC 2, addressing gaps and evidence compilation.
• Advise executive leadership: present monthly metrics, risk evaluations, and overall compliance progress.

Skills

Information security governance

Risk management

Compliance management

ISMS surveillance

Audit coordination

Tools

SIEM

DLP

EDR

Job description

Responsibilities

• Manage the ISO/IEC 27001:2022 ISMS: Oversee operations across seven global locations, maintaining risk registers, Statements of Applicability, documentation workflows, review schedules, and central portal records.
• Direct remediation workflows: Log, monitor, follow up, confirm, and resolve non-conformities end to end, conducting unbiased validation for external tasks.
• Coordinate audit operations: Organize internal review schedules, recertification assessments, documentation packages, and auditor engagement through full resolution.
• Drive security awareness: Deploy training modules and phishing exercises company-wide while providing detailed completion metrics.
• Manage third-party risk: Conduct vendor assessments, establish risk scores, complete periodic reviews, and handle contractual security obligations.
• Maintain proposal assets: Author responses for client security evaluations and continuously update our centralized knowledge repository.
• Spearhead compliance growth: Guide readiness efforts for ISO/IEC 42001, followed by ISO 9001 and SOC 2, addressing gaps and handling evidence compilation.
• Advise executive leadership: Present monthly metrics, risk evaluations, and overall compliance progress directly to executive management teams.

Requirements

• 5+ years in information security governance, risk and compliance
• Practical ISMS management experience, including active execution of ISO/IEC 27001 surveillance or recertification audits.
• Proven track record in evidence governance, including rigorous record-keeping, version control, and end-to-end traceability
• Demonstrated expertise navigating cross-border regulatory environments across multiple global territories, particularly within Australia, the UK, the US, and India.
• Exceptional written communication skills for creating clear, professional auditor- and client-facing documentation
• Ability to maintain consistent schedule alignment with Australian working hours (AEST operates 4.5 to 5.5 hours ahead of IST for all routine reviews and team cadences).

Nice to Have

• ISO/IEC 42001 AI governance: Familiarity with emerging AI management frameworks, supporting our upcoming certification initiatives.
• Compliance framework background: Hands-on exposure to SOC 2 or ISO 9001 quality management standards.
• Security operations tools oversight: Functional knowledge of SIEM, DLP, and EDR solutions to define and validate baseline controls.
• Consulting background: Prior experience in client-facing or professional services environments subject to external review.
• Google Workspace administration: Practical familiarity operating within enterprise Google Cloud ecosystem environments.