Information Security & Compliance Professional

Description:

Role Overview:

We are looking for a high-impact Information Security & Compliance professional to drive implementation and governance of Privacy (PIMS), Information Security (ISMS), and Business Continuity (BCMS) frameworks aligned with global standards.

This role will play a critical part in ensuring audit readiness, regulatory compliance, and risk mitigation across projects while enabling a strong culture of security and privacy within the organization.

Key Responsibilities:

Lead end-to-end implementation and governance of:

- ISO 27001 (ISMS)

- ISO 27701 (PIMS)

- ISO 22301 (BCMS)

Manage and support internal and external audits, ensuring successful certification and compliance.

Drive closure of findings from:

- Gap assessments

- Internal audits

- External audits and project reviews

Ensure adherence to information security, privacy, and business continuity standards across all projects.

Design and deliver training & awareness programs on security, privacy, and BCM practices.

Develop and maintain policies, procedures, and documentation aligned with ISO frameworks.

Track, report, and follow up on compliance actions and risk mitigation plans.

Desired Profile:

Experience & Expertise:

6 - 8 years of experience in:

- ISO implementation (27001 / 27701 / 22301)

- Audit and certification processes

- IT security / privacy / BCM environments

Mandatory Certifications:

- Lead Auditor ISO 27701 and ISO 22301 (must-have)

Good to Have:

Lead Implementer certifications in:

- ISO 27001 / 27701 / 22301

Core Competencies:

Strong understanding of:

- Information Security (ISMS)

- Privacy frameworks (PIMS)

- Business Continuity (BCMS)

Excellent documentation and policy-writing skills

Strong communication and stakeholder management

Ability to work independently and drive initiatives end-to-end

Why Join Us?:

- Opportunity to work on enterprise-scale compliance frameworks

- High visibility role with ownership of audits and certifications

- Exposure to global standards and regulatory environments