The Role
Maintain and improve the organization’s ISO 27001-aligned ISMS, coordinate internal and external audits, manage information security risks and controls, maintain compliance documentation, support incident and vendor assessments, and coordinate awareness, business continuity, and corrective action activities. The role also prepares security reports and collaborates with IT, HR, Operations, and other stakeholders to ensure effective security governance.
Summary Generated by Built In
- Maintain
and continuously improve the organization's ISMS in alignment with
ISO/IEC 27001.
- Coordinate internal and external ISO audits, including audit preparation,
evidence collection, and closure of observations.
- Conduct information security risk assessments and maintain the risk
register and risk treatment plans.
- Develop,
review, and maintain information security policies, procedures,
standards, and guidelines.
- Coordinate
the implementation and monitoring of ISO 27001 Annex A controls.
- Maintain
ISMS documentation, control evidence, compliance records, and audit
trackers.
- Conduct
periodic user access reviews, asset reviews, and security compliance
checks.
- Support vendor/third-party security assessments and compliance reviews.
- Coordinate
information security incident reporting, investigation, corrective
actions, and documentation.
- Support Business Continuity and Disaster Recovery activities.
- Conduct
and coordinate employee information security awareness and training
programs, including phishing awareness, password security, social
engineering, data protection, and acceptable-use practices.
- Monitor
compliance with organizational security policies and report deviations.
- Coordinate
with IT, HR, Operations, and other internal teams for
implementation of security controls.
- Track
corrective and preventive actions and ensure timely closure.
- Prepare ISMS reports, dashboards, compliance reports, and management review
inputs.
- Keep
updated with applicable information security standards, regulations, and
industry best practices.
Requirements
- 2–5
years of experience in ISMS / Information Security / IT GRC / IT
Compliance / Cybersecurity Governance.
- Strong
understanding of ISO 27001 and ISMS implementation.
- Knowledge
of ISO 27001 Annex A controls.
- Hands-on
experience in risk assessment and risk treatment.
- Experience
supporting ISO/internal/external audits.
- Good
understanding of:
- Information
Security Governance
- Access
Control
- Asset
Management
- Incident
Management
- Vendor
Risk Management
- Business
Continuity
- Data
Protection & Privacy
- Security
Awareness
- Strong
documentation and report-writing skills.
- Good
communication and stakeholder-management skills.
- Strong
attention to detail and ability to manage compliance activities
independently.
Benefits
- ISO
27001 Lead Implementer
- ISO
27001 Lead Auditor
- ISO
27001 Internal Auditor
- CISA
- CISM
- CRISC
Skills Required
- 2-5 years of experience in ISMS, information security, IT GRC, IT compliance, or cybersecurity governance
- Strong understanding of ISO 27001 and ISMS implementation
- Knowledge of ISO 27001 Annex A controls
- Hands-on experience with information security risk assessment and risk treatment
- Experience supporting ISO, internal, or external audits
- Understanding of information security governance, access control, asset management, incident management, vendor risk management, business continuity, data protection and privacy, and security awareness
- Strong documentation and report-writing skills
- Good communication and stakeholder-management skills
- Strong attention to detail and ability to manage compliance activities independently
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
InFynd is a cloud-based B2B data and prospecting platform that helps sales, marketing, and recruiting teams identify and engage potential customers. It provides contact information, company profiles, buyer-intent data, social media handles, and verified business email addresses and phone numbers. The platform supports target identification, company research, lead generation, and more effective sales conversion through accurate, GDPR-compliant business intelligence.
