Senior ISMS Compliance Manager

Anthesis Group; Pune District; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Anthesis Group in India is seeking a Senior Information Security Governance Manager to maintain ISO 27001:2022 certifications across multiple processes and ensure the ISMS remains effective. You will lead certification activities and coordinate internal controls with cross-functional teams.

The role requires 8–10 years in information security governance, strong audit and risk management skills, and proficiency in English.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, Risk Management, Audit, or related discipline.
• 8-10 years of experience in information security governance, compliance, ISMS management, audit, or risk management.
• Demonstrable experience supporting or maintaining ISO 27001 certification programmes, audits, evidence management, and regulatory requirements.
• Professional proficiency in English.

Responsibilities

• ISMS & Certification Management: Maintain and continuously improve ISO 27001:2022 ISMS; coordinate certification scopes; manage surveillance and recertification audits; maintain SoA, policies, standards, procedures, and evidence; track findings and corrective actions.
• Governance, Risk & Compliance: Facilitate information security risk assessments and treatment activities; monitor control effectiveness and compliance obligations; support internal control reviews and assurance activities; maintain metrics and reports.
• Client Assurance & Compliance Support: Support customer reviews, due diligence, vendor assurance, security assessments, and questionnaires; maintain evidence repositories; assist contract compliance reviews.
• Audit & Stakeholder Management: Coordinate internal and external auditors; work with control owners to obtain evidence and implement corrective actions; guide stakeholders; support management reviews and reporting.
• AI Governance Readiness: Support governance frameworks aligned with ISO/IEC 42001, including AI risk management, policy development, compliance activities, governance initiatives, and future certification readiness.
• Other duties as assigned by the manager.

Skills

ISO 27001:2022

ISO/IEC 42001

NIST CSF

SOC 2

GDPR

Audit management

Stakeholder management

Documentation & reporting

Risk assessment & treatment

Education

Bachelor's in Information Security / IT

Job description

Description

The Senior Information Security Governance Manager is responsible for maintaining Anthesis’ ISO 27001:2022 certifications across multiple business processes and ensuring the continued effectiveness of the Information Security Management System (ISMS).

Department: Enabling : IT

Location: India

Key Responsibilities

• ISMS & Certification Management: Maintain and continuously improve the ISO 27001:2022 ISMS; coordinate Wallbrook, Digital, and MERO certification scopes; manage surveillance and recertification audits; maintain the Statement of Applicability, policies, standards, procedures, and evidence; track findings, corrective actions, observations, and non-conformities; and ensure ongoing audit readiness.
• Governance, Risk & Compliance: Facilitate information security risk assessments and treatment activities; monitor control effectiveness and compliance obligations; support internal control reviews and assurance activities; maintain metrics, dashboards, and reports; and improve security policies and standards.
• Client Assurance & Compliance Support: Support customer reviews, due diligence, vendor assurance, security assessments, and questionnaires; maintain evidence repositories and certification documentation; assist contract compliance reviews; and support customer and procurement requirements.
• Audit & Stakeholder Management: Coordinate internal and external auditors; work with control owners to obtain evidence and implement corrective actions; guide business and technology stakeholders; support management reviews and executive reporting; and promote security awareness and governance maturity.
• AI Governance Readiness: Support governance frameworks aligned with ISO/IEC 42001, including AI risk management, policy development, compliance activities, governance initiatives, and future certification readiness.
• Other duties as assigned by the manager.

Skills, Knowledge & Expertise

Competences and Skills

• Strong understanding of ISO 27001:2022 requirements and certification processes.
• Working knowledge of ISO/IEC 42001, NIST CSF, SOC 2, GDPR, and related frameworks.
• Experience managing audits, evidence collection, and corrective action programmes.
• Strong stakeholder management and communication skills.
• Ability to coordinate across Security, Legal, IT, Sales, and business functions.
• Excellent documentation, organisation, and reporting capabilities.
• Strong analytical and risk-based decision-making skills.
• Ability to work independently across multiple priorities and time zones.

Training and experience

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Risk Management, Audit, or a related discipline.
• 8-10 years of experience in information security governance, compliance, ISMS management, audit, or risk management.
• Demonstrable experience supporting or maintaining ISO 27001 certification programmes, audits, compliance assessments, evidence management, and regulatory requirements.
• Professional proficiency in English.

Desirable

• ISO 27001 Lead Implementer or Lead Auditor certification; ISO/IEC 42001 or AI governance experience; customer, vendor, or third-party assurance experience; and certifications such as CISA, Security+, CRISC, or CISSP.