Manager, Security, Risk & Compliance

International SOS; Gurugram District; Hybrid; INR 1,200,000 - 2,100,000; Full time

Job summary

International SOS is seeking an Information Security, Risk and Compliance Manager to lead responses to client security questionnaires and audits, coordinating with IT, Legal, HR, and operations to accurately reflect the company’s security posture and risk controls.

The role focuses on maintaining evidence, supporting audits, and ensuring contractual information security obligations are met, with emphasis on ISO 27001, SOC 2, PCI DSS, and CIS Controls, in a hybrid setting in Gurgaon.

Qualifications

• Bachelor’s Degree in Information Security, Computer Science, or a related field.
• 2–5 years of experience in information security, GRC (Governance, Risk & Compliance), or third‑party risk management.
• Strong understanding of security frameworks and standards (e.g., ISO 27001, NIST, SOC 2, PCI DSS, CIS Controls).
• Experience completing detailed security questionnaires and assessments.
• Excellent written communication skills and attention to detail.
• Ability to handle multiple requests and prioritize effectively.

Responsibilities

• Respond to Security Questionnaires & Assessments: review, analyze, and complete customer/vendor information security questionnaires (e.g., SIG, CAIQ, custom formats).
• Coordinate Cross-Functional Responses: liaise with IT, Legal, Operations, etc. to gather information and documentation; maintain a knowledge base for efficient responses.
• Maintain Evidence and Documentation: organize policies, procedures, audit reports, penetration tests, certifications (ISO 27001, SOC 2, PCI DSS), risk assessments.
• Support Audits and Assessments: assist with client audits, due diligence and compliance assessments; track remediation efforts.
• Monitor Contract Compliance: document information security and data compliance; perform periodic assessments of contractual obligations.
• Process Management and Improvement: improve response processes; provide management reports and trend insights.

Skills

Information Security

GRC

Security questionnaires

Security frameworks

Education

Bachelor’s Degree in Information Security/Computer Science

Job description

Location- Candor Techspace sector 48, Gurgaon.

Hybrid working arrangement.

Notice period- Need early joiners.

A. Overall Purpose of the Job (Brief description of the primary purpose of this position)

We are seeking an Information Security, Risk and Compliance Manager to manage, coordinate, and respond to security questionnaires, due diligence assessments and audits by clients of Aspire Lifestyles India. This individual will work closely with Program Director, Information Security, Compliance, Legal, HR, IT, and Business Development teams to ensure timely and accurate responses that reflect the company’s security posture, controls, certifications, and risk management practices. The individual will also ensure ongoing compliance to contractual obligations with regards to information security.

B. Key Responsibilities (Critical responsibilities and skills of this position, listed in order of importance)

• Respond to Security Questionnaires & Assessments:
  • Review, analyze, and complete customer/vendor information security questionnaires (e.g., SIG, CAIQ, custom formats).
  • Ensure responses are accurate, consistent, and aligned with internal policies and external compliance requirements.
• Coordinate Cross-Functional Responses:
  • Liaise with internal stakeholders (IT, Legal, Operations, etc.) to gather required information and documentation.
  • Maintain a knowledge base of frequently asked questions and supporting documentation for efficient responses.
• Maintain Evidence and Documentation:
  • Organize and update artifacts such as security policies, procedures, audit reports, penetration test results, certifications (ISO 27001, SOC 2, PCI DSS), and risk assessments.
  • Support annual review and refresh of response libraries and evidence packages.
• Support Audits and Assessments:
  • Assist with client audits, security due diligence, and compliance assessments.
  • Coordinates, tracks, and reports on all remediation efforts when non-compliant issues arise.
  • Facilitate meetings and walkthroughs with external parties as needed.
• Monitor Contract Compliance:
  • Document information security, data compliance, and in scope laws and regulations
  • Perform periodic assessment to ensure contractual obligations on information security are met
• Process Management and Improvement:
  • Contribute to continuous improvement of the security questionnaire response process.
  • Provide management reporting with statistics as well as insights into trends
  • Identify common themes, suggest improvements in control documentation, and streamline recurring assessments.

C. Job Profile

Qualifications Required:

• Bachelor’s Degree in Information Security, Computer Science, or a related field.
• 2–5 years of experience in information security, GRC (Governance, Risk & Compliance), or third-party risk management.
• Strong understanding of security frameworks and standards (e.g., ISO 27001, NIST, SOC 2, PCI DSS, CIS Controls).
• Experience completing detailed security questionnaires and assessments.
• Excellent written communication skills and attention to detail.
• Ability to handle multiple requests and prioritize effectively.

Preferred:

• Industry certifications such as CISA, CISSP, CRISC, ISO 27001 Lead Implementer, or similar.
• Experience working in or with regulated financial institutions.

Soft Skills

• Strong organizational and time management skills.
• Ability to communicate technical content to both technical and non-technical audiences.
• Proactive problem-solver with a customer-service mindset.
• Collaborative team player who thrives in a cross-functional environment.

Required Languages (Brief description of the language skills needed to perform the job)

• English

Travel / Rotation Requirements (Brief description of any travel or rotation requirements)

• 15% Schedule may vary according to business needs