Information Security Engineer at Emids Technologies · Bengaluru (Bangalore) · 7 - 10 years · ₹5L - ₹10L / yr · Profitable · Posted 5 Jun 2023
Experience:- Overall 10 to 12 years of experience of which atleast 5 to 7 years’ experience should be in Information Security. Mandatory is 5 to 7 years’ experience in Information security and with one full end to end implementation experience.
Base location: - Bengaluru - Must
Joining requirement: - Not later than second week of June 2023.
Requirements: -
1. Mandatory - ISO 27001:2013 lead implementor certified
2. Mandatory - ISO 27001:2013 lead auditor certified (but if it is a good candidate, we can still consider)
3. Good to have – CISA, CISM, Risk management certification, Privacy certifications.
4. Mandatory - Atleast one end to end implementation experience of ISO 27001 standard. The candidate should have a good implementation knowledge of ISO 27001, ISO 27002 standards and is required to implement the ISO requirements and run the ISMS program for multiple countries.
5. This immediate requirement is for implementing the ISMS program for our Canadian office location. The candidate should be willing to work from Bengaluru in EST time zone during this implementation phase whenever required.
6. Good documentation skills.
7. Develop, implement, maintain, review and continually improve Information Security policies.
8. Good understanding and knowledge of applicable legal and regulatory requirements as relevant to information security.
9. Manage and maintain a risk register / risk database along with risk treatment plans.
10. Good understanding of physical and environmental security.
11. Conduct Internal Audits based ISO 27001 standards and Personal Data Protection policies. A good experience in independently conducting Internal and supplier audit with respect to information security.
12. Provide training to the employees on Privacy & Information Security Management System on regular intervals.
13. The greater part of the job involves interacting with people, interviewing them / auditing, Preparing audit reports, discussing / persuading / influencing.
14. Mandatory: Good verbal and written communication skills. Eye for details.
15. Good presentation skills.
16. Since this is a trusted role, candidates must be willing to undergo extensive background checks to verify their identity, character, qualifications, skills and experience.
Shubham Vishwakarma
Full Stack Developer - Averlon
About Emids Technologies
About
Emids Technologies is an IT services organization specializing in US healthcare. Our purpose is to use technology to make global healthcare accessible, affordable and of high-quality.
Established in 1999, emids employees over 2000+ employees spread across 3 continents. We are headquartered out of Nashville, Tennessee and have a presence in UK and India. In India we have 3 delivery centres in Bangalore and one delivery centre in Hyderabad which will largely cater to product engineering and R&D type of work, we started our office in Noida location also.
Emids has worked extensively on agile based product engineering using modern technologies providing solutions into healthcare technology, life sciences, payers and providers. In September 2019, Emids announced a partnership with New Mountain Capital.
100% of our revenue comes from the Healthcare domain. We support all different segments of the Healthcare vertical – Payers, Providers and Lifesciences organizations developing products for the Healthcare companies. emids is a leader in the Healthcare space and we have received numerous industry accolades. Emids has been rated as one of the top 50 fastest-growing firms in middle Tennessee. We are also one of the top 3 Healthcare IT co.’s in Nashville. Over 90 million lives are touched by clinical systems built by us. Systems built by us record over 2 million daily transactions. 3 of the top 5 payers use us. Epic and Cerner, 2 of the world’s most prominent EHR systems have signed us as their premium partners.
Healthcare organizations largely use Emids to help develop their application and product roadmap. Our strong domain knowledge coupled with a very strong development and R&D mindset has established us as a niche Healthcare IT co. focussed on innovation. Bulk of the work that we do is in the application or product development space.
Tech stack
JavaCandid answers by the company
Working at the intersection of design, engineering and domain expertise, our passionate team of problem solvers work closely with customers to blaze new trails that will positively impact the future of health.
Using technology and insights, we move nimbly and provide trusted advice, seeking ways to amplify results.
We focus on what matters. Creating transformative outcomes for patients, providers and partners.
We’re committed to bettering healthcare and empowering wellness.
Photos
Company social profiles
Similar jobs (5)
Position: Manager – Information Security
Experience: 10+ years
Location: Gurgaon
Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor
Key Responsibilities:
- Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
- Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
- Oversee security risk assessments, audits, and remediation plans across IT and business units.
- Manage a team of security professionals; mentor, coach, and evaluate performance.
- Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
- Lead incident response, RCA, and post-mortem reviews.
- Drive security awareness and training programs across the organization.
- Manage security budgets, vendor relationships, and contract negotiations.
Technical Skills:
- Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
- Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
- Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88 O2 74 97 43
Position: Manager – Information Security
Experience: 8+ years (with minimum 3 years in leadership roles)
Location: Gurgaon
Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor
Key Responsibilities:
? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
? Oversee security risk assessments, audits, and remediation plans across IT and business units.
? Manage a team of security professionals; mentor, coach, and evaluate performance.
? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
? Lead incident response, RCA, and post-mortem reviews.
? Drive security awareness and training programs across the organization.
? Manage security budgets, vendor relationships, and contract negotiations.
Technical Skills:
? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88O 27 49 743
website: www.glansolutions.com
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the
design, implementation, and maintenance of our ISO 27001 Information Security Management
System (ISMS). This is a hands-on leadership role responsible for establishing a robust security
governance framework, achieving ISO 27001 certification, and embedding a culture of
continuous security improvement across the organization.
Key Responsibilities
● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation
from gap analysis through to successful Stage 1 and Stage 2 certification audits;
manage external auditor relationships
● Risk Management: Develop and operationalize the information security risk
management framework; conduct risk assessments, treatment planning, and risk
acceptance processes.
● Policy & Governance : Author, approve, and maintain the Statement of Applicability
(SoA), information security policies, standards, and procedures aligned with ISO 27001
Annex A controls.
● Control Implementation: Translate ISO 27001 Annex A controls into operational
security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to
implement and validate controls.
● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and
KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective
actions.
● Third-Party Risk: Oversee vendor security assessments and ensure supply chain
security controls meet organizational and ISO 27001 standards.
● Stakeholder Management: Report ISMS performance, risks, and compliance status to
senior leadership and the board; act as primary liaison for external auditors and
regulators.
Required Qualifications
● 5+ years of experience in information security governance, risk, and compliance
● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap
analysis → certification)
● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS
documentation requirements
● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,
OCTAVE, FAIR)
● Familiarity with internal audit practices and managing external certification bodies
● Excellent stakeholder management and ability to influence across technical and non-
technical teams
● Strong documentation and communication skills — able to translate complex standards
into actionable guidance
Preferred Qualifications
● Experience implementing ISMS in fintech, healthcare, or regulated industries
● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks
● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments
● Knowledge of automation for compliance evidence collection and control testing
● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead
Implementer
Why Join Us
● Opportunity to build the security governance function from the ground up
● High-visibility role with direct impact on customer trust and market differentiation
● Collaborative environment that values security as a business enabler, not a blocker
Company Profile:
We are a one-stop financial services shop, widely known for quality of its advice, personalized
service and cutting-edge technology. We started our journey in 2008. Currently we are serving
more than 50,000 investors with a team of 100 members. Our core product offering is mutual
fund, FD, Govt. Bonds, Debenture, etc.
Job Title: Auditor – Management Systems (ISO Standards)
Location: Ahmedabad
Employment Type: Full Time
About the Role
We are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordinationWe are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordination
We are hiring an experienced Management System Auditor to conduct ISO audits, deliver quality assessment outcomes, and support certification activities. The ideal candidate should have hands on experience in ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 22000, ISO 50001, or other ISO standards, along with strong reporting and client handling skills.
The role involves extensive travel, interaction with clients across different industries, and compliance with ISO IEC 17021 1 and ISO 19011 guidelines.
Key Responsibilities
- Plan and conduct third-party certification audits, including Stage 1, Stage 2, Surveillance, and Re-certification audits.
- Assess client compliance with applicable ISO management system standards.
- Prepare audit plans, checklists, and detailed audit reports.
- Identify non-conformities, document audit findings, and ensure timely report submission.
- Coordinate with client teams and maintain professional audit practices.
- Identify potential business opportunities during client engagements.
Mandatory Requirements
- Education: B.E./B.Tech in Electrical Engineering.
- Experience: Minimum 5 years of relevant professional experience; experience in third-party auditing is strongly preferred.
- Certifications: IRCA/CQI Lead Auditor certifications in ISO 9001, ISO 14001, ISO 45001, and ISO 50001, or willingness to obtain all required certifications before joining.
- Audit Experience: Exposure to certification audits, audit documentation, compliance assessments, and ISO audit methodologies.
- Industry Exposure: Electrical/Electronics Manufacturing, Power & Energy, Engineering, Automation, Infrastructure, or Renewable Energy is preferred.
- Strong communication, analytical, report-writing, and client-handling skills.
- Willingness to travel extensively (60–80%) across India and occasionally overseas.
What This Role Offers
- Exposure to diverse industries and management system certification audits.
- Opportunities for professional development and continuous learning.
- Performance-based appraisal and competency development.
Auditor – Management Systems (ISO Standards)
Location: Ahmedabad ( Hybrid)
Employment Type: Full-Time
🔎 About the Role
We are hiring a skilled Management System Auditor to conduct ISO audits, deliver high-quality assessment outcomes, and support certification activities. The ideal candidate must have hands-on experience in ISO 9001, 14001, 45001, 27001, 22000, 50001 or other standards, along with strong reporting and client-handling skills.
This role involves extensive travel, interaction with diverse industries, and strict adherence to ISO/IEC 17021-1 and ISO 19011 guidelines.
🧩 Key Responsibilities
- Plan, prepare, and execute Stage 1, Stage 2, Surveillance, Recertification, Transfer & Special Audits.
- Review client documentation, audit scope, and previous audit history.
- Evaluate compliance with applicable ISO standards using process approach, risk-based thinking & sampling techniques.
- Conduct opening & closing meetings and prepare accurate audit reports.
- Record findings, non-conformities, observations, and improvement opportunities.
- Ensure professional client interaction across Quality, EHS, IT, HR & Operations teams.
- Maintain impartiality, confidentiality, and compliance with accreditation guidelines.
- Participate in calibration, witness audits, and competency upgrades.
- Identify business opportunities and refer potential clients during audits.
🎓 Qualifications
- Bachelor’s degree in Engineering, Science, IT, or Environmental Science.
- CQI/IRCA Certified Lead Auditor in at least one standard (Mandatory/Preferred).
- Minimum 5 years industry/auditing experience.
- Experience conducting minimum 15–20 third-party audits (preferred).
- Exposure to sectors such as manufacturing, IT, pharma, infrastructure, services (added advantage).
💼 Skills & Competencies
- Strong knowledge of ISO standards & audit techniques.
- Familiar with ISO 19011 principles.
- Excellent communication, report writing & analytical skills.
- Ability to manage audits across multiple locations.
- High level of integrity, professionalism, and client orientation.
- Proficiency in MS Office.
📈 Key Performance Indicators (KPIs)
- Number of audits completed within timeline & quality standards.
- Accuracy and clarity of audit reports.
- Client satisfaction scores and feedback.
- Lead sharing & business development support.
- Compliance with accreditation and internal review requirements.
✈️ Travel Requirement
- Willingness to travel 60–80% across India and overseas for on-site audits.
- Flexibility for hybrid (on-site + remote) audits.
Follow CutshortShubham Vishwakarma
Full Stack Developer - Averlon