IT security and Compliance Administrator

Commtel Networks Limited; Mumbai; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

Commtel Networks Limited in Mumbai, India seeks an IT Security and Compliance Administrator to own and improve the ISMS in line with ISO/IEC 27001:2022. You will drive governance, evidence collection, and audit readiness across IT and business operations without owning day-to-day infra.

Key responsibilities include maintaining risk registers, SoA, policies and procedures, coordinating internal/external audits, tracking corrective actions, and monitoring CVEs to protect IT infrastructure.

Responsibilities

• Own and maintain the ISMS framework in line with ISO/IEC 27001:2022.
• Coordinate and support internal and external audits.
• Track audit observations, non-conformities, and corrective actions to closure.
• Continuously collect and maintain ISO evidence including access reviews, backup verification, patch compliance, and logging.

Job description

Home / Job / IT security and Compliance Administrator

IT Department

IT security and Compliance Administrator

Department

Reporting To

Head of IT / Manager-IT

Role Purpose

The Information Security & ISO 27001 Compliance Administrator is responsible for owning, maintaining, and continuously improving the organization’s Information Security Management System (ISMS) in alignment with ISO/IEC 27001:2022.
This role ensures compliance, audit readiness, and effective governance across IT and business operations without directly owning day‑to‑day IT infrastructure implementation.

Key Responsibilities

ISO 27001 & ISMS Management

• Own and maintain the ISMS framework in line with ISO/IEC 27001:2022
• Maintain:
  • Risk register and risk treatment plans
  • Statement of Applicability (SoA)
  • ISMS policies, procedures, and standards
• Coordinate and support internal and external audits
• Track audit observations, non‑conformities, and corrective actions to closure

Compliance Monitoring & Evidence Management

• Continuously collect and maintain ISO evidence including:
  • Access reviews
  • Backup verification
  • Patch compliance
  • Logging and monitoring records
• Ensure evidence is:
  • Complete
  • Timely
  • Audit‑ready
• Periodically review control effectiveness and report findings

Governance & Risk Coordination

• Conduct periodic risk assessments with IT and business stakeholders
• Monitor compliance with security policies and procedures
• Escalate compliance gaps, risks, and control failures
• Support supplier security assessments and third‑party risk reviews
• Support customer security assessments and third‑party risk reviews
• Review latest CVE / vulnerabilities and analyze how it affect IT-infrastructure