Information Security Specialist- Permanent Role

Designation - Information Security Specialist Location - Address: 4th Floor, NCC Windsor, International Airport Road, opposite Flying Club, Yashoda Nagar, Jakkur, Bengaluru, Karnataka
Job Type: Full Time

We are seeking a skilled and proactive Information Security Specialist to join our Internal IT
organisations Information Security Management System (ISMS) and leading the
implementation of ISO 27001 standards and the regulations that the business needs to
information security frameworks, risk management, and compliance requirements.
Lead the development, implementation, and maintenance of the organizations

Conduct gap analysis and risk assessments to identify vulnerabilities and

Collaborate with cross-functional teams to define and document security policies,

Monitor compliance with internal security policies and external regulatory

Provide training and awareness programs to employees on information security

Stay updated with the latest security trends, threats, and technologies to ensure

proactive risk management.
~ Support incident response planning and execution, including post-incident analysis

Develop and maintain a risk register and ensure timely mitigation of identified risks.
Evaluate and implement security tools and technologies to enhance the

organizations security posture.
Perform regular vulnerability assessments and penetration testing coordination.
Ensure secure configuration and hardening of IT infrastructure and applications.
Support data classification and data protection initiatives across the organization.
Assist in business continuity and disaster recovery planning from a security
Track and report key performance indicators (KPIs) and metrics related to

information security.
~ Participate in change management processes to assess security impacts of new

projects and technologies.

Bachelors degree in information technology, Cybersecurity, Computer Science, or a

related field.
~ Minimum 5 years of experience in information security, with at least 2 years

focused on ISMS and ISO 27001 implementation.
~ Strong understanding of security governance, risk management, and compliance

Experience conducting internal audits and managing external audit processes.
Familiarity with regulatory requirements such as GDPR, HIPAA, or other relevant
Hands-on experience with security tools and technologies (e.g., Ability to identify and mitigate network vulnerabilities and explain how to avoid
Knowledge of cloud security principles and controls (Azure, MS Purview, MS

Ability to manage multiple projects and priorities in a dynamic environment.
Experience in developing and delivering security awareness training programs.
Sound understanding of IT infrastructure with significant hands-on experience in

cloud platforms.
~ Gain hands-on experience with leading enterprise SaaS and endpoint management tools.
Opportunity to grow your skills and advance your career through continuous learning.

We are a stable organisation with with over 28 years of experience in SI / IT - in an environment where companies rarely cross 10.• The foundation for future growth is on the following foundations: Globally revered brands in partnerships with Ample - in the enterprise and retail industry• You would be representing a brand that the market has revered and valued over two decades• We aspire to grow at a trailblazing pace over the next 5 years, and reach USD 1 Billion . Our customers and team members experience this every day, making it a place to be for anyone engaging with us We have an open culture where people are expected to focus on what-is-right instead of who-is-right.

---