Security Compliance Manager

Larsen & Toubro; Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Larsen & Toubro Limited, based at the Corporate IT Headoffice in Powai, Mumbai, seeks an ISMS/InfoSec professional with 3–8 years of experience in security compliance. The role focuses on ISO27001 governance, audits, and GRC, with exposure to EDR, SIEM, and risk frameworks. DPDP act familiarity and security certifications are desirable.

Work from office with 6-day operating model; candidate must be self-motivated and capable of leading ISO27001 initiatives across the corporate group.

Qualifications

• Min 3–8 years in Information security compliance.
• Knowledge of ISO27001 and related standards.
• Familiarity with security technologies (EDR, DLP, PIM, IRM, SIEM, SOC).
• Experience performing internal audits for standards & frameworks such as ISO27001, DPDP act.
• Knowledge of risk management frameworks.
• Security certifications (CISA, CISSP, CISM) desirable; ISO27001 Lead Auditor desirable.

Responsibilities

• Perform Cyber Assurance assessments within L&T group of companies.
• Keep track of control remediations across companies & guide on process & technology controls.
• Operationalize & Run GRC program.
• Explore automation opportunities in audit & GRC areas.
• Evaluate & run proof of concept for GRC technologies.
• Maintain oversight on current & emerging threat landscape and accordingly update cyber assurance framework.
• As ISMS manager, run ISO27001 program for corporate.
• Should be a self-starter, motivated.

Skills

ISO27001 knowledge

EDR

DLP

PIM

IRM

SIEM

SOC

Internal audits

Risk frameworks

DPDP act

Education

B.Tech/B.E./MCA/M.Sc. in Cyber Security

ISO27001 Lead Auditor certification preferred

Job description

Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai.

The company is counted among world's top five construction companies. The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services.

This role is based out of Corporate IT in Headoffice:

Job Location:Powai, Mumbai Working Model: Work from office

Operating Model: 6 days (2nd and 4th Saturdays Off)

Educational Qualifications: B.Tech/B.E./MCA/M.Sc. In Cyber Security Specialization, ISO 27001 Lead Auditor certified preferred.

Experience: Min. 3-8 years in Information security compliance

Job Profile:

• Sound knowledge of Info Sec standards such as ISO27001
• Basic understanding of following security technologies (EDR, DLP, PIM, IRM, SIEM, SOC etc)
• Should have performed internal audits for standards & frameworks such as ISO27001, DPDP act, etc
• Knowledge of Risk Frameworks

Job Responsibilities:

• Perform Cyber Assurance assessments within L&T group of companies
• Keep track of control remediations across companies & guide on process & technology controls Operationalize & Run GRC program
• Explore automation opportunities in audit & GRC areas
• Evaluate & run proof of concept for GRC technologies
• Maintain oversight on current & emerging threat landscape and accordingly update cyber assurance framework
• As ISMS manager, run ISO27001 program for corporate
• Should be a self-starter, motivated

Security certifications (CISA, CISSP, CISM), ISO27001 lead auditor desirable