Mid information system security specialist

Expian Technologies; Bengaluru; Presencial; INR 900.000 - 1.300.000; Tempo integral

Resumo da vaga

The Scalers in Bengaluru, India seek an IT InfoSec & Technical Specialist to lead and strengthen information security and IT operations, ensuring systems stay secure, reliable, and compliant with ISO 27001 standards. You will own end-to-end information security processes, manage endpoint security, firewalls, patch management, data protection, and contribute to ISO 27001 compliance and recertification.

As part of the IT team, you’ll combine hands-on technical expertise with strategic thinking,

Qualificações

• 3+ years of hands-on Information Security and IT Compliance experience (ISO, GDPR, SOC 2).
• Strong policy, risk assessment, incident response and audit evidence skills.

Responsabilidades

• Drive and oversee IT compliance programs to ISO 27001:2022, ISO 9001, SOC 2, GDPR, and DPDPA.
• Design and maintain security controls aligned with regulatory requirements.
• Lead security documentation lifecycle: policies, procedures, and guidelines.
• Manage IT risk analyses, vulnerability assessments, and incident lifecycle from detection to mitigation.
• Coordinate audits, collect and present audit evidence for certifications.
• Bridge IT operations with security architecture to drive improvements.
• Advise leadership on cybersecurity and compliance strategies; run security awareness sessions.

Conhecimentos

InfoSec & Compliance

GRC Capabilities

IT Operations & Infra

Communication

Security Audits

Descrição da vaga

We are looking for a talented IT InfoSec & Technical Specialist to lead and strengthen our information security and IT operations while ensuring our systems remain secure, reliable, and compliant with ISO 27001 standards.

In this role, you will own end-to-end information systems security processes, from identifying and mitigating security vulnerabilities across our infrastructure to managing endpoint security, firewalls, antivirus solutions, patch management, intrusion detection, and data protection controls. You will also play a key role in implementing and maintaining organizational security policies, improving the reliability of our IT systems, supporting ISO 27001 compliance and recertification, and advising senior leadership on cybersecurity risks and best practices.

As a member of the IT team, you will combine hands-on technical expertise with strategic thinking, partnering with cross-functional teams to build a strong security-first culture across The Scalers.

ROLES AND RESPONSIBILITIES:

• Compliance Management: Drive, implement, and oversee enterprise IT compliance programs, ensuring strict adherence to ISO 27001:2022, ISO 9001, SOC 2, GDPR, and DPDPA requirements.
• Security Controls Implementation: Design, deploy, and maintain robust security controls aligned with regulatory frameworks and organizational objectives to protect company assets and data.
• Policy & Documentation: Lead the end-to-end lifecycle of security documentation. Draft, review, implement, and enforce IT security policies, procedures, and guidelines across the organization.
• Risk & Incident Management: Conduct comprehensive IT risk analyses, vulnerability assessments, and threat modeling. Oversee the incident management lifecycle, from detection and response to root cause analysis and mitigation.
• Audit & Evidence Management: Act as the primary point of contact for internal and external audits. Prepare, collect, manage, and present audit evidence to ensure continuous audit readiness and successful (re)certifications.
• IT Operations Integration: Leverage a foundational understanding of IT operations and infrastructure to evaluate the current IT security architecture, identify gaps, and drive structural improvements.
• Security Culture & Advisory: Advise senior leadership on cybersecurity and compliance strategies. Conduct security awareness sessions, phishing campaigns, and mentor cross-functional teams on data privacy best practices.

SKILLS AND COMPETENCIES:

• Experience: 3+ years of dedicated, hands-on experience in Information Security and IT Compliance (ISO, GDPR, SOC 2, etc.).
• Framework Expertise: Deep understanding and proven implementation experience with ISO 27001:2022, ISO 9001, SOC 2, GDPR, and DPDPA frameworks.
• GRC Capabilities: Strong command of policy preparation, risk assessment methodologies, incident response planning, and evidence management for stringent audits.
• Technical Foundation: Solid operational knowledge of IT infrastructure, networks, and systems administration to effectively bridge the gap between compliance requirements and technical execution.
• Communication: Excellent analytical, documentation, and presentation skills. Ability to translate complex regulatory and technical requirements into actionable steps for non-technical stakeholders.