Security, Compliance and Group IT Administrator Nexus Product Engineering Bengaluru

Power Tech Consulting Pty Ltd.; India; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Power Tech Consulting Pty Ltd. is seeking a Security, Compliance and Group IT Administrator to run the ISMS and AI management system implementation across India and the group.

You will maintain Microsoft 365, Entra ID, and cloud environments, collaborating with Finance on FinOps and ensuring policy is applied across our global setup. The role emphasizes hands-on policy and technical verification rather than people management, with overlaps to Australian business hours and a focus on cost

Qualifications

• 3–5 years in information security, GRC, or IT/cloud administration.
• Hands-on ISO/IEC 27001:2022 work.
• Experience with Microsoft 365 administration and cloud environments (Azure/AWS/GCP).

Responsibilities

• Own the ISMS, including risk register and policies; conduct internal audits.
• Lead ISO/IEC 42001 AI management system implementation through to certification.
• Manage compliance evidence and control testing in Scrut for continuous assurance.
• Run access reviews across cloud, source control, and business systems.
• Embed secure development by threat modelling, secret scanning, and security reviews before release.
• Lead incident response and post-incident reviews.
• Assess supplier security and respond to customer security questionnaires.
• Provide Group IT administration and support for staff across Australia and India.

Skills

Information security

GRC

Cloud administration

ISO/IEC 27001:2022

Microsoft 365 administration

Tools

Azure

AWS

GCP

Scrut

Entra ID

Job description

Tell us a little about you. We review every application and reply to those that look like a good fit.

About the role

Security, Compliance and Group IT Administrator

Ahands-on security, compliance and IT operations role. You'll run informationsecurity and compliance day to day for Power Tech Nexus, take us throughISO/IEC 42001 certification, and look after the Microsoft 365 and multi-cloudenvironments the group runs on, including what they cost.

Ata Glance

• Location: India (preferred, Hybrid); otherlocations considered
• Employment type: Full-time, permanent
• Experience: 3–5 years in informationsecurity, GRC, or IT and cloud administration, including hands-on ISO/IEC27001:2022 work
• Role type: Hands-on across policy, technicalverification, and day-to-day administration, not a people-management role
• Core focus: ISO/IEC 27001 and 42001, controlevidence, Entra ID and Microsoft 365 administration, Azure, AWS and GCPadministration, and FinOps
• Reports to: CISO
• Working hours: Shifted India hours with atleast 4 hours' daily overlap with Australian (Melbourne and Brisbane) businesshours, typically around 7:30am–4:30pm IST, adjusted for Australian daylightsaving

AboutPower Tech Consulting

Power Tech is a data, AI, cloud, andtransformation consultancy serving mining, financial services, hospitality, andgovernment clients across Australia, New Zealand, Fiji, Singapore, and India.We're multi-vendor, so we recommend what's right, not what's easy to sell, andwe're building our own products alongside client work.

Service through contribution. Trustthrough transparency. Accountable from end to end. Join us and help shape whatPower Tech becomes.

Aboutthe Role

Power Tech Nexus is the productcompany of the Power Tech group. We build and run our own AI-driven softwareproducts for businesses in Australia and the region. We are a small teamgrowing deliberately, so every hire shapes how the product and the engineeringpractice turn out.

As Security, Compliance and Group ITAdministrator, you'll run our ISO/IEC 27001:2022-certified information securitymanagement system (ISMS), lead our ISO/IEC 42001 AI management system (AIMS)implementation through to certification, and keep our controls real andevidenced. You'll also be the group's IT administrator: the person who looksafter our Microsoft 365 and Entra ID tenant, supports our people, administersour Azure, AWS and GCP environments, and works with Finance on cloud spend. Therole suits someone equally comfortable writing a policy and reading a cloudconfiguration to check the policy is actually applied.

KeyResponsibilities

• Own the ISMS, including the risk register,Statement of Applicability, policies, and internal audit.
• Lead our ISO/IEC 42001 AIMS implementationthrough to certification, including the AI impact assessment.
• Manage compliance evidence and controltesting in our compliance platform (Scrut), so controls are evidencedcontinuously, not only before an audit.
• Run access reviews across cloud, sourcecontrol, and business systems.
• Embed secure development in how the teambuilds product, including threat modelling, dependency and secret scanning, andsecurity review before release.
• Lead incident response and post-incidentreviews.
• Assess supplier and third-party security, andanswer customer security questionnaires.
• Deliver security awareness for the team.
• Provide Group IT administration and support:onboarding and offboarding, devices, licences, and first-line and escalatedsupport for staff across Australia and India, with requests tracked andresolved within agreed times.
• Administer our Microsoft Entra ID tenant,including users, groups, Conditional Access, Privileged Identity Management,MFA, and app registrations, keeping it aligned to the identity model our leadarchitect designs.
• Administer Exchange Online and SharePointOnline, including mailboxes, mail flow, retention and sharing policies, siteand permission structures, and Microsoft 365 licensing.
• Administer our Azure, AWS, and GCPenvironments at the tenant, subscription, account, and project level: landingzones, role assignments, guardrails and policy, and security findings fromDefender for Cloud and the AWS and GCP equivalents. Product workloads and theirinfrastructure as code remain with the DevOps / Platform Engineer.
• Run FinOps with the Finance team: tag andallocate cloud costs by product and entity, track spend against budget, reportmonthly, flag anomalies early, and recommend savings such as rightsizing,reservations, and shutting down unused resources.
• Keep runbooks, decisions, and handoverswritten down, and make administrative changes through reviewed code or arecorded change wherever possible, not ad hoc in a portal.