ISMS Executive

Position : ISMS Executive.

Experience : 5- 8 yrs.

Location : Airoli Navi Mumbai

Key Responsibilities

ISMS Implementation & Management

• Develop, implement, and maintain the ISMS framework, including policies, procedures, and guidelines based on ISO 27001, PCI DSS, SOC2, and other relevant standards.
• Conduct regular risk assessments and risk management activities to identify vulnerabilities, evaluate threats, and recommend appropriate controls to mitigate information security risks.
• Collaborate with cross-functional teams to ensure adherence to ISMS protocols and alignment with business objectives and compliance frameworks.

Compliance, Audits & Security Testing

• Ensure organizational compliance with regulatory and industry standards including ISO 27001, PCI DSS, SOC2, PA DSS, and data protection laws.
• Lead internal and external audits to assess ISMS effectiveness, manage audit processes, and drive continuous improvement.
• Coordinate Vulnerability Assessment and Penetration Testing (VaPT) exercises to proactively identify and remediate security gaps.

Documentation & Reporting

• Maintain comprehensive documentation for all ISMS processes, policies, controls, VaPT results, and audit activities.
• Prepare detailed reports for senior management on ISMS performance, risk posture, and compliance status, with actionable recommendations.

Continuous Improvement

• Stay updated on emerging security trends, threat landscapes, and best practices across frameworks like PCI DSS, SOC2, and PA DSS.
• Recommend enhancements to the ISMS based on audit findings, risk assessments, VaPT outcomes, and evolving business requirements.

Desired Traits

• Proactive and self-driven with a strong sense of ownership.
• Ability to work independently and collaboratively across teams.

Excellent interpersonal and communication skills to engage stakeholders at all levels