Lead - Information Security Governance & Compliance

Larsen & Toubro (L&T); Mysuru, Bengaluru; On-site; INR 1,400,000 - 2,000,000; Full time

Job summary

Larsen & Toubro (L&T) in Mysuru seeks an experienced Information Security Manager to own ISMS governance, policies, and procedures. You will lead multi-geo security certifications and drive compliance with ISO 27001, SOC2, TiSAX, and CMMC.

You will translate complex laws and privacy rules for India, the US, and Europe into practical security controls, coordinate audits with internal teams, clients and auditors, and guide RFI/RFP responses to showcase robust customer security assurance.

Qualifications

• Define and implement ISMS policies and governance aligned with ISO 27001.
• Lead end-to-end security certifications and audits (ISO 27001, SOC2, TISAX, CMMC).
• Ensure multi-geo regulatory and data privacy compliance across India, US, Europe.
• Coordinate with internal teams, clients and auditors to drive audit readiness.

Responsibilities

• Define and manage ISMS Policies, manual, guidelines, procedures.
• Manage IT security assessments and certifications like ISO 27001, SOC2 Type II, NIST, etc.
• Knowledge of cybersecurity laws and data privacy for India, US, Europe.
• Coordinate audits with departments, clients, auditors; educate employees.

Skills

ISMS implementation

ISO 27001

SOC2

CMMC

Regulatory compliance India US Europe

Audit coordination

Training employees

RFP/RFI responses

Education

Bachelor's degree in IT/CS or related

ISO 27001 Lead Auditor/Implementer

Tools

GRC tools

Job description

Role & responsibilities

• Define and manage ISMS (Information Security Management System) Policies, manual, guidelines, procedures.
• Responsible for managing the IT security assessment and certifications like ISO 27001, TiSAX, SOC2 Type II, NIST, CMMC, Cyber Essentials, etc.,
• Having knowledge on Cybersecurity laws, IT Acts, Data Privacy Laws and law of the land primarily for India, Americas, Europe Geos
• Coordination with respective departments (Internal / Clients / Auditors etc.,) and prepare and conducting Internal/External audits.
• Educating & training employees on Cybersecurity.
• Responsible for review and responding to RFI/RFPs related to IT / Security related questions.

Preferred candidate profile

• Define, implement, and continuously improve the organizations ISMS policies, procedures, and governance framework aligned with ISO 27001 and other global standards
• Lead and manage end-to-end security certifications and audits (ISO 27001, SOC2, TISAX, CMMC, etc.), ensuring timely compliance and closure of findings
• Ensure multi-geo regulatory and data privacy compliance (India, US, Europe) by translating legal requirements into actionable security controls
• Coordinate with internal teams, clients, and auditors to drive audit readiness, risk mitigation, and compliance assurance across delivery units
• Drive security awareness, training programs, and support RFI/RFP responses, acting as a key interface for customer security assurance