Senior Executive/ Assistant Manager- Information Security

JobItUs; Delhi; On-site; INR 8,00,000 - 12,00,000; Full time

Job summary

A leading consultancy firm is seeking a Senior Executive/Assistant Manager in Information Security in Delhi NCR. This role involves developing and monitoring security policies, managing risks, and ensuring compliance. The ideal candidate will have 3-5 years of experience in Information Security and relevant certifications. Strong analytical and communication skills are essential. Competitive compensation and a collaborative working environment are offered.

Qualifications

• 3-5 years of experience in Information Security Management within consultancy services.
• ISO 27001:2022 & ISO 31000 Internal auditor certification are preferred.
• Strong ability to assess risks and implement solutions.

Responsibilities

• Develop and implement Information Security Management System (ISMS) policies.
• Design and enhance learning modules for security awareness.
• Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Track and resolve exploitable vulnerabilities.
• Execute phishing tests and monitor progress.
• Handle Infosec software installations and access requests.
• Monitor and send SOC alerts to relevant teams.
• Prepare Management Information System (MIS) reports.

Skills

Governance, Risk, and Compliance (GRC)

Risk management

Communication skills

Analytical skills

Problem-solving

Tools

ServiceNow

Patch Management

Job description

Location – Mumbai/Delhi NCR

Job Description: Senior Executive/ Assistant Manager- Information Security

Grant Thornton India is seeking a dynamic and detail-oriented Executive to join our Information Security team. This role is pivotal in developing, implementing, and monitoring security policies, ensuring compliance, and managing risk across the firm. The ideal candidate will have expertise in Governance, Risk, and Compliance (GRC) and will play a key role in tracking vulnerabilities, managing security alerts, and overseeing learning modules.

Responsibilities and Duties:

• Policy & Compliance: Develop and implement Information Security Management System (ISMS) policies and procedures.

• Learning Management: Design, monitor, and enhance learning modules for security awareness.
• Risk & Compliance: Conduct contract reviews and manage Third-Party Risk Management (TPRM) processes.
• Security Monitoring: Track and resolve exploitable vulnerabilities with the support team.
• Phishing & Threat Management: Execute phishing tests and monitor firm-wide progress.
• Access & Software Management: Handle Infosec software installations, VPN access, generic email IDs, and admin rights requests, ensuring proper tracking and documentation.
• Security Operations Center (SOC): Monitor and send SOC alerts to relevant teams while maintaining records.
• Reporting & Analysis: Prepare Management Information System (MIS) reports for the IT team.

Qualifications & Skills:

• Experience: 3-5 years in Information Security Management within consultancy services.
• Certifications: ISO 27001:2022 & ISO 31000 Internal auditor certification.
• Technical Expertise: Preferred experience with ServiceNow, Learning Management, and Patch Management (Banks/NBFIs/Consultancy).
• Analytical & Problem-Solving: Strong ability to assess risks and implement solutions.
• Communication: Excellent verbal and written skills for effective collaboration.
• Organized & Methodical: Attention to detail with a structured approach to security management.