ISMS Compliance - Manager

Quest Global; Bengaluru; On-site; INR 2,800,000 - 4,200,000; Full time

Job summary

Quest Global in Bengaluru is seeking an ISMS Compliance Manager/Deputy Manager to lead information security governance and compliance initiatives. The role requires directing policy development, audits, and cross-functional security activities across the organization.

The candidate will drive awareness, manage security exceptions, and support customer audits while coordinating with the CISO to ensure robust DR/BCP and regulatory adherence.

Qualifications

• Experience in developing policies, standards and procedures per ISO/IEC 27001 and TiSAX.
• Strong auditing skills with ability to identify trends from findings.
• Knowledge of GDPR and DPDPA requirements.
• Experience with BCP/DR planning and incident management.

Responsibilities

• Develops and revises information security policies and procedures.
• Drives information security awareness activities across the organization.
• Manages Information Security Exceptions and service requests.
• Supports customer and third-party information security audits.
• Plans and conducts internal audits and regulatory/compliance checks.
• Assists in filling out RFI/RFP/Contracts/SOW requirements.
• Leads ISMS core team meetings and security council.
• Facilitates risk assessment and mitigation actions with process owners.
• Leads root cause analysis for critical incidents and non-conformities.
• Monitors policy compliance and reports to the CISO.
• Develops and supervises information security measures across the organization.
• Advises on current security technologies and regulatory issues.
• Supports BCP/DR framework deployment at org and customer levels.
• Contributes to customer-specific compliance as required.

Skills

Information security

Auditing

Policy development

Regulatory compliance

BCP/DR planning

Education

Bachelor's degree in Computer Science or Information Systems

Master's degree or higher

Lead Auditor ISO/IEC 27001

Job description

Job Requirements

Job Description:

Incumbent serves as an information security executive and will be required to work with information security team members from respective work area

Job Designation:

ISMS Compliance - Manager / Deputy Manager

Key Responsibilities:

• Develops & revises information security policies & procedures
• Initiates, facilitates and promotes activities to create information security awareness within the organization
• Managing Information Security Exception Management by resolving service requests
• Supports and Facilitates Customer and 3rd Party Information Security Audits
• Plans and performs internal audit and technical compliance checks
• Provide necessary support in filling out RFI/RFP/Customer Contracts/SOW requirements
• Organizes & conducts ISMS core team meetings and security council
• Facilitates the process owners in performing the risk assessment & mitigation actions
• Facilitates the process owners in performing the root cause analysis for the critical incidents & other non-conformities identified during internal / external / customer audits
• Monitors compliance with information security policies and procedures, referring problems to the appropriate Function / Operation Manager and report to CISO
• Develops and supervises all information security measures in the organization
• Advises the team with current details about information security technologies and related regulatory issues
• Assists the BCP / DR team in establishing the robust framework on business continuity & disaster recovery
• Managing customer specific compliance as per customer requirements

General Skills and Specifications:

• Ability to define problems, collect data, establish facts, and draw valid conclusions
• Ability to work independently and to take emergent decisions on his/her own
• Ability to effectively present information and respond to questions from top management, groups of managers and customers
• Experience across developing policies, standards, and procedures as per ISO/IEC 27001, TiSAX and other information security related standards / frameworks
• Strong Auditing skill, well differentiation between observation & Non-conformances. Analysis of Audit findings to indicate trend and identify the weak area
• Good knowledge of GDPR and DPDPA regulations / requirements and implementation
• Hands-on on conducting process trainings and facilitate eternal certification audits
• Implementation knowledge on BCP and DR policies / procedures at Org level and customer account level
• Excellent interpersonal communication and organizational skills with demonstrated abilities in team crisis management. Good team player, Strong team orientation & leadership qualities, hardworking, enthusiastic with good attitude

Education & Qualifications:

• Bachelors degree / Masters Degree or higher in Computer Science, Information Systems or a related field.
• At least 10 - 20 years of experience in computing or related area with a focus on information security related activities.
• Lead Auditor on ISO/IEC 27001 standard and other security related frameworks

Professional IT security related certifications is an added advantage.

Work Experience

Education & Qualifications:

• Bachelor’s degree / Master’s Degree or higher in Computer Science, Information Systems or a related field.
• At least 10 - 20 years of experience in computing or related area with a focus on information security related activities.
• Lead Auditor on ISO/IEC 27001 standard and other security related frameworks

Professional IT security related certifications is an added advantage