Senior Consultant Information Security- ISO 27001 Implementer

Glan Management Consultancy; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading consultancy firm in Gurugram is seeking a Senior Consultant for Information Security with a focus on ISO 27001 implementation. The ideal candidate will have over 7 years of relevant experience, including certifications in ISO 27001 and ISO 27701. Responsibilities include conducting risk assessments, supporting ISMS policies, and preparing reports on information security posture. Strong communication and technical writing skills are essential for this role.

Qualifications

• 7+ years of experience in Information Security.
• Certifications in ISO 27001 and ISO 27701 required.
• Experience conducting information security risk assessments.

Responsibilities

• Support as Lead implementor towards ISMS policies and procedures.
• Conduct regular information security risk assessments.
• Prepare regular reports on overall information security posture.

Skills

ISO 27001 Lead Implementer certification

Understanding of IT Act

Knowledge of common vulnerability scanning tools

Excellent technical writing skills

Strong communication skills

Knowledge of common attack vectors

Education

Bachelor’s degree in IT

Tools

Qualys

GRC platforms

Job description

Share Job :# Senior Consultant Information Security- ISO 27001 Implementer **Company:** Glan Management Consultancy **Location:** Gurgaon **Experience:** 7-15 year **Salary:** **Employment Type:****Job Description:**Job Title: Senior Consultant Information Security – ITJob Purpose: Acting in a key technical management & execution capacity to provide a conduit between IT teams and key business stakeholders thereby ensuring information technology needs are managed consistently, following professional IT and global standards, and delivered with a high quality and customer satisfaction.Reward level: Middle ManagementJob Location GurgaonExperience 7 yearsRelevant Experience 7 yearsReporting to: General ManagerQualification: Bachelor’s degree in IT and relevant Information SecurityCertifications**Key Deliverables:**1. Provide support as Lead implementor towards ISMS and PIMS policies, procedures, and guidelines and ensure to perform regular review and update.2. Gather evidence of continuous compliance with ISO 27001:2022 and ISO 27701:2019, DPDPA, IT Act and Cert In Regulation including audit logs, records of reviews, timely closure of open audit and risks and sharing the report with management.3. Conduct regular, documented information security and privacy risk assessments on Security Tools and Technologies by identifying assets, threats, vulnerabilities, likelihood, and impact.4. Prioritize identified vulnerabilities, detailed findings, remediation recommendations, trending reports on vulnerability posture towards closure with stakeholders.5. Implementation of a comprehensive, ongoing security project plan for remediation of open audit gaps.6. Prepare regular report on overall information security posture, GRC maturity, and risk landscape to relevant stakeholders7. Perform Root Cause Analysis and lessons learned from information security incidents, actively participate in audits and support internal IT staff to perform technical assessments and controls with evidence.**Key Relationships:**1. Internal IT and business customers .2. Global/Local IT Vendor, market and global (HQ) colleagues,3. Internal staff - direct reports (where applicable)4. IT vendors, contractors (where applicable)**Knowledge Skills and Abilities:**1. **Must have ISO 27001 Lead Implementer and ISO 27701 Lead Implementer certifications.**2. In depth understanding of IT Act, DPDPA, Cert In regulations, CIS Controls as well as UK DPA and ISO 310003. Good to have certification on CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional) and Cloud Security certifications (e.g., CCSK, CCSP, vendor-specific like AWS Security Specialty)4. Familiarity with common vulnerability scanning tools like Qualys (features, reporting, agent-based vs. network scans) and Cloud Security Posture Management (CSPM) tools like Wiz (cloud service provider configurations, misconfigurations, compliance checks in AWS, Azure, GCP).5. Conduct and lead IT DR drills and Tabletop exercises with internal IT teams.6. Hands on knowledge on common security technologies (e.g., firewalls, EDR, Cloud Security, VAPT tools, SIEM, WAF, DLP, PAM, BAS, encryption etc.,).7. Ability to handle and manage Endpoint, Perimeter, Cloud and Data Security technical consoles with configuration and fine tuning of policies.8. Understanding of various penetration testing types (e.g., network, web application, API, mobile, cloud) and methodologies9. Knowledge of common attack vectors and exploitation techniques like MITREATTACK and DEFEND, NIST Cyber Security Framework.10. Excellent technical writing skills for creating clear, concise, and comprehensive security policies, standards, and procedures.11. Ability to analyse complex risk data and present actionable insights.12. Proficiency with GRC platforms or tools for managing policies, risks, and controls13. Exceptional verbal and written communication skills to articulate complex security concepts to technical and non-technical stakeholders14. Strong technical skills to diagnose security issues, identify root causes, and develop effective solutions.15. Ability to develop and deliver engaging security training sessions and awareness campaigns to internal IT staff.16. Ability to stay updated with the latest security threats, vulnerabilities, technologies, and regulatory changes.**mail updated resume with salary details-****email: [e-mail]****satish- 8802749743**website: www.glansolutions.com### Apply for Senior Consultant Information Security- ISO 27001 Implementer