Infosec Consultant ( Compliance)

Job Summary

We are seeking a passionate and skilled Information Security Consultant with hands-on experience in

ISO 27001:2022 implementation and information security audits, particularly in the banking and

finance domain. The ideal candidate will possess strong knowledge of cybersecurity frameworks and

demonstrate the ability to manage end-to-end compliance projects.

Key Experience & Skills Required:

Proven experience in the implementation of ISO 27001:2022 for clients, including gap

assessments, risk treatment plans, and ISMS documentation.

Hands-on experience in conducting risk assessments and information security audits onsite

at client location (internal and external).

Experience in comprehensive IS audits specifically within the Banking, Financial Services and

Insurance(BFSI) sector.

Strong background in developing, reviewing, and maintaining information security policies,

procedures, and SOPs.

Familiarity with industry-recognized cybersecurity standards and frameworks such as:

• NIST Cybersecurity Framework (CSF)
• ISO 27001: 2022 standard
• RBI CSF, ITGRC, Outsourcing services master directions
• IRDAI Cyber Security Guidelines
• SEBI CSCRF
• UIDAI Guidelines
• SOC 1 / SOC 2 Type 1/ Type 2
• Digital Personal Data Protection (DPDP) Rules
• Other relevant circulars, guidelines, and regulatory frameworks.

Excellent communication, documentation, and interpersonal skills, with the ability to clearly

convey technical information to stakeholders at all levels.• Ability to manage multiple assignments independently while maintaining quality and

timelines.

• Ability to prepare detailed Audit checklists and reports as per the scope mentioned for the

project.

Mandatory Certification:

ISO 27001 Lead Auditor certification (IRCA CQI Certified) and CISA certification (ISACA).

Key Responsibilities:

Lead and manage end-to-end implementation of ISO 27001:2022, including scoping, risk

assessments, and creation of ISMS documentation.

Perform risk identification, assessment, and treatment in accordance with ISO 27001 and

organizational context.

Plan and conduct internal audits, external audit, and deliver IT security awareness and

training sessions onsite at client location.

Should have conduct audit based on Banking, Insurance, Aadhaar, SEBI Guidelines onsite at

client location.

Develop and maintain audit checklists, detailed audit reports, and corrective action plans.

Design, review, and update information security policies, procedures, and process-related

documentation in line with applicable standards and business requirements.

Support ongoing maintenance and continuous improvement of the Information Security

Management System (ISMS).

Coordinate with stakeholders and clients to ensure timely and effective execution of audit

and compliance tasks