ISMS Assistant Manager

Quest Global; Chennai District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Quest Global in Chennai, India seeks an information security executive to strengthen our security program. You will lead audits, monitor compliance and drive policy enforcement across functions.

The role involves coordinating with customers and third parties, guiding risk assessments, and supporting business continuity and disaster recovery initiatives to protect critical assets.

Qualifications

• Bachelor’s or Master’s in CS/IS or related field.
• 3–6 years of information security experience.
• Lead/Internal Auditor on ISO/IEC 27001 and other security frameworks.
• Professional IT security certifications, BCM/DR trainings an added advantage.

Responsibilities

• Promotes information security awareness within the organization.
• Handles Information Security Exception Management by resolving service requests.
• Performs internal audits and technical compliance checks.
• Supports customer and third-party information security audits.
• Facilitates risk assessment and mitigation actions.
• Monitors compliance with information security policies; reports to CISO.
• Manages customer-specific compliance per requirements.
• Develops and supervises information security measures across the organization.
• Advises on current information security technologies and regulatory issues.
• Assists BCP/DR team in establishing robust business continuity framework.

Skills

Information security

Auditing

Policy development

Regulatory compliance

Risk assessment

Communication

Education

Bachelor’s / Master’s in CS/IS

ISO/IEC 27001 lead/internal auditor

IT security certifications (advantage)

Job description

Job Requirements

At Quest Global, it's not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.

Job Requirements

At Quest Global, it's not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.

Key Responsibilities

• Initiates, facilitates and promotes activities to create information security awareness within the organization
• Managing Information Security Exception Management by resolving service requests
• Plans and performs internal audit and technical compliance check
• Supports and Facilitates Customer and 3rd Party Information Security Audits
• Facilitates the process owners in performing the risk assessment & mitigation actions
• Monitors compliance with information security policies and procedures, referring problems to the appropriate Function / Operation Manager and report to CISO
• Managing customer specific compliance as per customer requirements
• Develops and supervises all information security measures in the organization
• Advises the team with current details about information security technologies and related regulatory issues
• Assists the BCP / DR team in establishing the robust framework on business continuity & disaster recovery

We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration. We believe that our company culture is the key to our ability to make a true difference in every industry we reach. Our teams regularly invest time and dedicated effort into internal culture work, ensuring that all voices are heard.

We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas. We know embracing our unique differences makes us better, and that solving the worlds hardest engineering problems requires diverse ideas, perspectives, and backgrounds. We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference-makers in our workplace.

Work Experience

Incumbent serves as an information security executive and will be required to work with information security team members from respective work area

• Ability to define problems, collect data, establish facts, and draw valid conclusions
• Ability to work independently and to take emergent decisions on his/her own
• Ability to effectively present information and respond to questions from top management, groups of managers and customers
• Experience across developing policies, standards, and procedures as per ISO/IEC 27001, TiSAX and other information security related standards / frameworks
• Strong Auditing skill, well differentiation between observation & Non-conformances. Analysis of Audit findings to indicate trend and identify the weak area
• Excellent interpersonal communication and organizational skills with demonstrated abilities in team crisis management. Good team player, Strong team orientation & leadership qualities, hardworking, enthusiastic with good attitude
• Good knowledge of GDPR and DPDP regulations / requirements and implementation

Education & Qualifications

• Bachelor’s degree / Master’s Degree or higher in Computer Science, Information Systems or a related field.
• At least 3 - 6 years of experience in computing or related area with a focus on information security related activities.
• Lead / Internal Auditor on ISO/IEC 27001 standard and other security related frameworks
• Professional IT security certifications, Business continuity and Disaster Recovery & Management trainings is an added advantage