Information Security Consultant

Job Summary: We are seeking a skilled Information Security Consultant with specialization in ISO/IEC 27001:2022. The ideal candidate shall have hands-on experience in implementing and maintaining ISMS, drafting security policies and procedures, conducting internal audits, and collaborating with teams to drive security initiatives and ensure compliance with applicable standards and regulations. Key Responsibilities: Implement, maintain, and enhance the Information Security Management System (ISMS) in line with ISO/IEC 27001:2022. Conduct internal audits, risk assessments, and gap analyses to identify vulnerabilities and recommend improvements to client. Draft, review, and maintain security policies, procedures, standards, and guidelines across the organization. Monitor compliance with security policies and support enforcement activities where required. Develop and maintain security documentation such as risk treatment plans, audit reports, and compliance metrics. Required Qualifications and Experience: Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field. Minimum of 2 years’ experience in information security roles with direct involvement in ISO 27001 implementations and audits. Proven experience in drafting and implementing information security policies and procedures. Familiarity with legal and regulatory compliance standards (e.g., GDPR, DPDP Act, CERT-IN, etc.) is a plus. Excellent written and verbal communication skills, including documentation and report writing. Ability to manage multiple tasks, prioritize effectively, and work independently in a dynamic environment. Show more Show less