Technical Architect

ThoughtFocus; Bengaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading technology consulting firm is seeking an experienced Information Security professional. The ideal candidate will have hands-on experience in security operations, especially ISO 27001 implementation, and risk management. Responsibilities include leading the Information Security Management System, maintaining security policies, conducting audits, and collaborating with cross-functional teams. The role demands strong analytical and communication skills to enhance the organization’s security posture.

Qualifications

• Hands-on experience in Security Operations and IT Security technologies.
• Certified ISO 27001 Lead Auditor and Lead Implementer.
• Strong expertise in drafting Information Security policies and frameworks.
• Proven experience in implementing and managing ISMS.
• Experience in IT Risk Management and Controls frameworks.

Responsibilities

• Support threat management, incident response, and security monitoring activities.
• Lead the implementation of the Information Security Management System.
• Draft and maintain Information Security policies and standards.
• Conduct internal audits and coordinate with external auditors.
• Support IT Risk & Controls Framework by identifying risks and monitoring controls.
• Ensure security controls are effective across the organization.
• Recommend enhancements to security processes and controls.

Skills

Security Operations

ISO 27001 knowledge

Drafting security policies

IT Risk Management

Analytical skills

Communication skills

Job description

Role Overview

The candidate is an experienced Information Security professional with a strong blend of technical security operations expertise and information security process/standards knowledge. With hands‑on experience in ISO 27001 implementation, auditing, and continuous improvement, they contribute to strengthening the organization’s security posture through robust policies, risk management practices, and compliance frameworks.

Key Responsibilities

• Apply hands‑on experience in IT security domains to support threat management, incident response, vulnerability handling, and security monitoring activities.
• Lead the implementation, maintenance, and continuous improvement of the Information Security Management System in alignment with ISO 27001 requirements.
• Draft, review, and maintain Information Security policies, standards, and technical documents by leveraging a unique combination of technical and process-oriented knowledge.
• Conduct internal audits as ISO 27001 Lead Auditor, coordinate with external auditors, and drive remediation of audit findings.
• Support and improve the IT Risk & Controls Framework by identifying risks, performing risk assessments, monitoring controls, and ensuring alignment with industry best practices.
• Work with cross‑functional teams—including IT, business units, and compliance—to ensure security controls are understood, implemented, and effective across the organization.
• Recommend enhancements to security processes, controls, and technologies based on evolving threats, audit insights, and operational learnings.

Skills & Qualifications

• Hands‑on experience in Security Operations and IT Security technologies.
• Certified ISO 27001 Lead Auditor and Lead Implementer.
• Strong expertise in drafting Information Security policies and frameworks.
• Proven experience in implementing and managing ISMS.
• Experience in IT Risk Management and Controls frameworks (preferably in global or financial organizations).
• Strong analytical, communication, and documentation skills.