ISMS Compliance Deputy Manager

Quest Global; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Quest Global seeks an ISMS Compliance Senior Executive / Asst. Manager to lead information security governance across the organization.

The role requires developing standards, guiding audits, and ensuring regulatory alignment with ISO/IEC 27001 and related frameworks. The incumbent will drive awareness programs, manage exceptions, facilitate customer and third-party audits, and coordinate risk assessments and incident root-cause analyses with cross-functional teams and the CISO.

Qualifications

• Bachelor’s degree or higher in Computer Science, Information Systems or related field.
• 10–15 years of experience in computing or related area with a focus on information security activities.
• Lead Auditor on ISO/IEC 27001 and other security-related frameworks.

Responsibilities

• Develops and revises information security policies and procedures.
• Promotes information security awareness within the organization.
• Manages Information Security Exception Management and resolves service requests.
• Supports customer and 3rd party information security audits.
• Plans and performs internal audits and technical compliance checks.
• Assists in filling out RFI/RFP/Customer Contracts/SOW requirements.
• Organizes ISMS core team meetings and security council.
• Facilitates risk assessments and mitigation actions by process owners.
• Supports root cause analysis for incidents during audits.
• Monitors policy compliance and reports to CISO.
• Develops and supervises information security measures across the organization.
• Advises on information security technologies and regulatory issues.
• Assists BCP/DR teams to establish robust framework for business continuity.

Skills

Auditing

ISO 27001

GDPR knowledge

Regulatory awareness

Education

Bachelor’s or Master’s in CS/IS

Lead Auditor certification

Job description

Job Description

Incumbent serves as an information security executive and will be required to work with information security team members from respective work area

Job Requirements

Job Description

Incumbent serves as an information security executive and will be required to work with information security team members from respective work area

Job Designation

ISMS Compliance Senior Executive / Asst. Manager

Key Responsibilities

• Develops & revises information security policies & procedures
• Initiates, facilitates and promotes activities to create information security awareness within the organization
• Managing Information Security Exception Management by resolving service requests
• Supports and Facilitates Customer and 3rd Party Information Security Audits
• Plans and performs internal audit and technical compliance checks
• Provide necessary support in filling out RFI/RFP/Customer Contracts/SOW requirements
• Organizes & conducts ISMS core team meetings and security council
• Facilitates the process owners in performing the risk assessment & mitigation actions
• Facilitates the process owners in performing the root cause analysis for the critical incidents & other non-conformities identified during internal / external / customer audits
• Monitors compliance with information security policies and procedures, referring problems to the appropriate Function / Operation Manager and report to CISO
• Develops and supervises all information security measures in the organization
• Advises the team with current details about information security technologies and related regulatory issues
• Assists the BCP / DR team in establishing the robust framework on business continuity & disaster recovery
• Managing customer specific compliance as per customer requirements

General Skills And Specifications

• Ability to define problems, collect data, establish facts, and draw valid conclusions
• Ability to work independently and to take emergent decisions on his/her own
• Ability to effectively present information and respond to questions from top management, groups of managers and customers
• Experience across developing policies, standards, and procedures as per ISO/IEC 27001, TiSAX and other information security related standards / frameworks
• Strong Auditing skill, well differentiation between observation & Non-conformances. Analysis of Audit findings to indicate trend and identify the weak area
• Good knowledge of GDPR and DPDPA regulations / requirements and implementation
• Hands on on conducting process trainings and facilitate eternal certification audits
• Implementation knowledge on BCP and DR policies / procedures at Org level and customer account level
• Excellent interpersonal communication and organizational skills with demonstrated abilities in team crisis management. Good team player, Strong team orientation & leadership qualities, hardworking, enthusiastic with good attitude

Education & Qualifications

• Bachelor’s degree / Master’s Degree or higher in Computer Science, Information Systems or a related field.
• At least 10-15 years of experience in computing or related area with a focus on information security related activities.
• Lead Auditor on ISO/IEC 27001 standard and other security related frameworks

Professional IT security related certifications is an added advantage.

Work Experience

Education & Qualifications:

• Bachelor’s degree / Master’s Degree or higher in Computer Science, Information Systems or a related field.
• At least 10-15 years of experience in computing or related area with a focus on information security related activities.
• Lead Auditor on ISO/IEC 27001 standard and other security related frameworks

Professional IT security related certifications is an added advantage