Senior Consultant Information Security- ISO 27001 Implementer

Glan Management Consultancy; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading consultancy firm is seeking a Senior Consultant in Information Security with expertise in ISO 27001 and ISO 27701 implementations. This role demands a seasoned professional with 7-15 years of experience in managing IT security projects while liaising between IT teams and stakeholders. The ideal candidate will possess strong analytical and communication skills, handle compliance measures, and deliver continuous security improvements. Interested applicants are encouraged to submit their resumes detailing salary expectations to the provided email.

Qualifications

• 7+ years of experience in information security.
• Proven track record with ISO standards implementation.
• Hands-on knowledge with security technologies.
• Proficient in risk assessment methodologies and security governance.
• Excellent technical writing and stakeholder communication skills.

Responsibilities

• Act as the Lead Implementor for ISMS and PIMS policies.
• Gather evidence for compliance with ISO standards.
• Conduct risk assessments on security tools and technologies.
• Coordinate with IT, business units, and vendors for security controls.
• Prepare reports on GRC maturity and risk landscape for stakeholders.

Skills

ISO 27001 Lead Implementer certification

ISO 27701 Lead Implementer certification

Technical writing

Analytical skills

Communication skills

Risk management

Qualys

NIST CSF

MITRE ATT&CK

GRC tooling

Information Security Policy writing

Security risk assessment

Security training delivery

Education

Bachelor’s degree in IT

Tools

Qualys

CSPM tools

GRC platforms

Job description

Share Job :# Senior Consultant Information Security- ISO 27001 Implementer **Company:** Glan Management Consultancy **Location:** Gurgaon **Experience:** 7-15 year **Salary:** 0 **Employment Type:****Job Description:**Job Title: Senior Consultant Information Security – ITJob Purpose: Acting in a key technical management & execution capacity to provide a conduit between IT teams and key business stakeholders thereby ensuring information technology needs are managed consistently, following professional IT and global standards, and delivered with a high quality and customer satisfaction.Reward level: Middle ManagementJob Location GurgaonExperience 7 yearsRelevant Experience 7 yearsReporting to: General ManagerQualification: Bachelor’s degree in IT and relevant Information SecurityCertifications**Key Deliverables:**1. Provide support as Lead implementor towards ISMS and PIMS policies, procedures, and guidelines and ensure to perform regular review and update.2. Gather evidence of continuous compliance with ISO 27001:2022 and ISO 27701:2019, DPDPA, IT Act and Cert In Regulation including audit logs, records of reviews, timely closure of open audit and risks and sharing the report with management.3. Conduct regular, documented information security and privacy risk assessments on Security Tools and Technologies by identifying assets, threats, vulnerabilities, likelihood, and impact.4. Prioritize identified vulnerabilities, detailed findings, remediation recommendations, trending reports on vulnerability posture towards closure with stakeholders.5. Implementation of a comprehensive, ongoing security project plan for remediation of open audit gaps.6. Prepare regular report on overall information security posture, GRC maturity, and risk landscape to relevant stakeholders7. Perform Root Cause Analysis and lessons learned from information security incidents, actively participate in audits and support internal IT staff to perform technical assessments and controls with evidence.**Key Relationships:**1. Internal IT and business customers .2. Global/Local IT Vendor, market and global (HQ) colleagues,3. Internal staff - direct reports (where applicable)4. IT vendors, contractors (where applicable)**Knowledge Skills and Abilities:**1. **Must have ISO 27001 Lead Implementer and ISO 27701 Lead Implementer certifications.**2. In depth understanding of IT Act, DPDPA, Cert In regulations, CIS Controls as well as UK DPA and ISO 310003. Good to have certification on CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional) and Cloud Security certifications (e.g., CCSK, CCSP, vendor-specific like AWS Security Specialty)4. Familiarity with common vulnerability scanning tools like Qualys (features, reporting, agent-based vs. network scans) and Cloud Security Posture Management (CSPM) tools like Wiz (cloud service provider configurations, misconfigurations, compliance checks in AWS, Azure, GCP).5. Conduct and lead IT DR drills and Tabletop exercises with internal IT teams.6. Hands on knowledge on common security technologies (e.g., firewalls, EDR, Cloud Security, VAPT tools, SIEM, WAF, DLP, PAM, BAS, encryption etc.,).7. Ability to handle and manage Endpoint, Perimeter, Cloud and Data Security technical consoles with configuration and fine tuning of policies.8. Understanding of various penetration testing types (e.g., network, web application, API, mobile, cloud) and methodologies9. Knowledge of common attack vectors and exploitation techniques like MITREATTACK and DEFEND, NIST Cyber Security Framework.10. Excellent technical writing skills for creating clear, concise, and comprehensive security policies, standards, and procedures.11. Ability to analyse complex risk data and present actionable insights.12. Proficiency with GRC platforms or tools for managing policies, risks, and controls13. Exceptional verbal and written communication skills to articulate complex security concepts to technical and non-technical stakeholders14. Strong technical skills to diagnose security issues, identify root causes, and develop effective solutions.15. Ability to develop and deliver engaging security training sessions and awareness campaigns to internal IT staff.16. Ability to stay updated with the latest security threats, vulnerabilities, technologies, and regulatory changes.**mail updated resume with salary details-****email: [e-mail]****satish- 8802749743**website: www.glansolutions.com### Apply for Senior Consultant Information Security- ISO 27001 Implementer