Information Security Manager

Position: Manager – Information Security

Experience: 10+ years

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88 O2 74 97 43

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the

design, implementation, and maintenance of our ISO 27001 Information Security Management

System (ISMS). This is a hands-on leadership role responsible for establishing a robust security

governance framework, achieving ISO 27001 certification, and embedding a culture of

continuous security improvement across the organization.

Key Responsibilities

● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation

from gap analysis through to successful Stage 1 and Stage 2 certification audits;

manage external auditor relationships

● Risk Management: Develop and operationalize the information security risk

management framework; conduct risk assessments, treatment planning, and risk

acceptance processes.

● Policy & Governance : Author, approve, and maintain the Statement of Applicability

(SoA), information security policies, standards, and procedures aligned with ISO 27001

Annex A controls.

● Control Implementation: Translate ISO 27001 Annex A controls into operational

security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to

implement and validate controls.

● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and

KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective

actions.

● Third-Party Risk: Oversee vendor security assessments and ensure supply chain

security controls meet organizational and ISO 27001 standards.

● Stakeholder Management: Report ISMS performance, risks, and compliance status to

senior leadership and the board; act as primary liaison for external auditors and

regulators.

Required Qualifications

● 5+ years of experience in information security governance, risk, and compliance

● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap

analysis → certification)

● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS

documentation requirements

● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,

OCTAVE, FAIR)

● Familiarity with internal audit practices and managing external certification bodies

● Excellent stakeholder management and ability to influence across technical and non-

technical teams

● Strong documentation and communication skills — able to translate complex standards

into actionable guidance

Preferred Qualifications

● Experience implementing ISMS in fintech, healthcare, or regulated industries

● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks

● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments

● Knowledge of automation for compliance evidence collection and control testing

● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead

Implementer

Why Join Us

● Opportunity to build the security governance function from the ground up

● High-visibility role with direct impact on customer trust and market differentiation

● Collaborative environment that values security as a business enabler, not a blocker

Company Profile:

We are a one-stop financial services shop, widely known for quality of its advice, personalized

service and cutting-edge technology. We started our journey in 2008. Currently we are serving

more than 50,000 investors with a team of 100 members. Our core product offering is mutual

fund, FD, Govt. Bonds, Debenture, etc.

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

• Perform security control assessments against organizational policies, security standards, and regulatory requirements.
• Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
• Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
• Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
• Conduct control testing and risk assessments and support internal/external security audits.
• Review security policies, procedures, standards, and governance frameworks for compliance.
• Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
• Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

• Cyber Security Risk & Compliance / GRC
• IT Risk & Controls
• Security Control Assessment & Testing
• Security Audits
• Backup & Disaster Recovery
• BCP / DR
• Risk Assessment
• Compliance & Governance
• Security Policies & Standards
• Audit Finding & Remediation Management

Auditor – Management Systems (ISO Standards)

Location: Ahmedabad ( Hybrid)

Employment Type: Full-Time

🔎 About the Role

We are hiring a skilled Management System Auditor to conduct ISO audits, deliver high-quality assessment outcomes, and support certification activities. The ideal candidate must have hands-on experience in ISO 9001, 14001, 45001, 27001, 22000, 50001 or other standards, along with strong reporting and client-handling skills.

This role involves extensive travel, interaction with diverse industries, and strict adherence to ISO/IEC 17021-1 and ISO 19011 guidelines.

🧩 Key Responsibilities

• Plan, prepare, and execute Stage 1, Stage 2, Surveillance, Recertification, Transfer & Special Audits.
• Review client documentation, audit scope, and previous audit history.
• Evaluate compliance with applicable ISO standards using process approach, risk-based thinking & sampling techniques.
• Conduct opening & closing meetings and prepare accurate audit reports.
• Record findings, non-conformities, observations, and improvement opportunities.
• Ensure professional client interaction across Quality, EHS, IT, HR & Operations teams.
• Maintain impartiality, confidentiality, and compliance with accreditation guidelines.
• Participate in calibration, witness audits, and competency upgrades.
• Identify business opportunities and refer potential clients during audits.
• 
  

🎓 Qualifications

• Bachelor’s degree in Engineering, Science, IT, or Environmental Science.
• CQI/IRCA Certified Lead Auditor in at least one standard (Mandatory/Preferred).
• Minimum 5 years industry/auditing experience.
• Experience conducting minimum 15–20 third-party audits (preferred).
• Exposure to sectors such as manufacturing, IT, pharma, infrastructure, services (added advantage).
• 
  

💼 Skills & Competencies

• Strong knowledge of ISO standards & audit techniques.
• Familiar with ISO 19011 principles.
• Excellent communication, report writing & analytical skills.
• Ability to manage audits across multiple locations.
• High level of integrity, professionalism, and client orientation.
• Proficiency in MS Office.

📈 Key Performance Indicators (KPIs)

• Number of audits completed within timeline & quality standards.
• Accuracy and clarity of audit reports.
• Client satisfaction scores and feedback.
• Lead sharing & business development support.
• Compliance with accreditation and internal review requirements.
• 
  

✈️ Travel Requirement

• Willingness to travel 60–80% across India and overseas for on-site audits.
• Flexibility for hybrid (on-site + remote) audits.

Job Title: Auditor – Management Systems (ISO Standards)

Location: Ahmedabad

Employment Type: Full Time

About the Role

We are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordinationWe are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordination

We are hiring an experienced Management System Auditor to conduct ISO audits, deliver quality assessment outcomes, and support certification activities. The ideal candidate should have hands on experience in ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 22000, ISO 50001, or other ISO standards, along with strong reporting and client handling skills.

The role involves extensive travel, interaction with clients across different industries, and compliance with ISO IEC 17021 1 and ISO 19011 guidelines.

Key Responsibilities

• Plan and conduct third-party certification audits, including Stage 1, Stage 2, Surveillance, and Re-certification audits.
• Assess client compliance with applicable ISO management system standards.
• Prepare audit plans, checklists, and detailed audit reports.
• Identify non-conformities, document audit findings, and ensure timely report submission.
• Coordinate with client teams and maintain professional audit practices.
• Identify potential business opportunities during client engagements.
• 
  

Mandatory Requirements

• Education: B.E./B.Tech in Electrical Engineering.
• Experience: Minimum 5 years of relevant professional experience; experience in third-party auditing is strongly preferred.
• Certifications: IRCA/CQI Lead Auditor certifications in ISO 9001, ISO 14001, ISO 45001, and ISO 50001, or willingness to obtain all required certifications before joining.
• Audit Experience: Exposure to certification audits, audit documentation, compliance assessments, and ISO audit methodologies.
• Industry Exposure: Electrical/Electronics Manufacturing, Power & Energy, Engineering, Automation, Infrastructure, or Renewable Energy is preferred.
• Strong communication, analytical, report-writing, and client-handling skills.
• Willingness to travel extensively (60–80%) across India and occasionally overseas.
• 
  

What This Role Offers

• Exposure to diverse industries and management system certification audits.
• Opportunities for professional development and continuous learning.
• Performance-based appraisal and competency development.

Job Title: Chief Manager – IT Infrastructure & Security

Location: Gurgaon

Experience: 12+ year in same

Qualification: B.Tech/MCA

Preferred Certifications: Palo Alto PCCSE, CyberArk, Nutanix NCP, VMware VCP, CCNP.

Must have exp in Server, network, firewall, edr, virtualization system (vm-ware, dutanix)

Technical Experience Required:

• AWS (Amazon Web Services) and/or Microsoft Azure
• VMware ESX / ESXi
• Windows Server
• Active Directory (AD)
• Kaseya
• DNS & DHCP
• Forcepoint / Websense
• Kaspersky AV
• Cisco networking
• SAN (Storage Area Network)
• Core Networking Tech: VoIP (Voice over IP), VPN (Virtual Private Network), TCP/IP, WAN/LAN/WLAN routing, and switching protocols.

Key Deliverables

Infrastructure Architecture & Operations

• Own the scoping, architecture and design of new infrastructure that will support the business.
• Administer HP Infrastructure, Nutanix HCI, Dell VxRail, VMware, Windows and Linux environments.
• Architect, monitor and maintain Active Directory services, File Services, Server Infrastructure and WAN/LAN/WLAN supporting business-critical systems.
• Be responsible for server, storage, network, security and monitoring hardware, software and services, ensuring they are optimised for availability, stability, integrity, performance and scalability.
• Forecast demand for storage, computing and network capacity, and take appropriate action before capacity limits are reached.
• Maintain IT hardware and software — including servers, peripherals, network nodes, terminals and wiring — manage equipment inventory and the hardware life cycle.

Network & End-User Computing

• Manage LAN/WAN, VPN, Cisco routing/switching and Cisco Meraki WiFi environments.
• Troubleshoot and quickly resolve network issues.
• Oversee end-user computing — laptops, desktops, printers, AV devices, iOS devices/iPad, MDM and endpoint management — and end-user support operations across Head Office, Stores and Warehouse. Security, Identity & Compliance
• Manage Palo Alto firewalls, SentinelOne EDR/XDR, CyberArk PAM, GTB DLP and Forcepoint/ForceScout security platforms.
• Perform regular security monitoring to identify any possible intrusions.
• Manage certificate/PKI and domain/DNS services, including issuance, renewal, rotation and revocation.
• Establish and maintain corporate IT infrastructure standards for configuration and security.
• Ensure IT governance, audit and compliance requirements are met.

Continuity, Backup & Performance

• Define, implement, test and maintain data back-up and recovery protocols to ensure availability.
• Drive business continuity, backup, disaster recovery and infrastructure modernisation projects.
• Be accountable for measuring and optimising application and infrastructure performance, and lead recovery actions after system failures.
• Monitor and maintain infrastructure stability against defined KPIs.

Leadership, Vendor & Governance

• Provide support to, manage and train the IT Infrastructure team.
• Manage vendor relationships, budgets, SLAs and team performance.
• Project-plan with clear and concise communication methods.
• Prepare and maintain documentation of the IT infrastructure.

Additional Technical Competencies

The candidate must have experience in one or more of the following areas:

Network & Infrastructure Engineering

• Proficient understanding of IP networking: Cisco, TCP/IP, Window Server, Network Security, Cloud Servers that includes technical and functional understanding of network security, VOIP, WAN, LAN, and internet routing and switching protocols, wireless and VPN capabilities.
• Demonstrated Data Center/Server Room build out experience (Power, Network, Cooling, etc...).
• Expertise in VMware ESX, SAN, Monitoring tools, and Operating Systems (strong understanding of Windows).
• Experience in managing VMware environment.
• Experience in managing cloud-based infrastructure like AWS/Azure.
• Expertise in windows environment in domain/Forrest/DNS/DHCP. System Administration & Maintenance
• Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
• Use of system management tool Kaseya and development of new scripts in this tool for deployment of policies.
• Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.
• Manage processes to Create, change, and delete user accounts per request from HR.
• Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.

Security, Backups & Data Protection

• Skilled in managing websense/forcepoint DLP/Web security.
• Experience in managing Kaspersky antivirus system.
• Perform regular security monitoring to identify any possible intrusions.
• Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.
• Closely monitoring and developing the procedures for backups of the servers.
• Perform regular file archival and purge as necessary.

Monitoring, Testing & Troubleshooting

• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
• Daily monitor the Server Event Logs, Firewall and other security equipment logs and also the logs of scheduled archival software.
• Test the operating system software, the networking software and also the computer hardware.
• Must possess the initiative to resolve issues before they become critical.

Project Management & Documentation

• To assist IT Head for technical issues on various projects such as support on testing, rolling out and execution of projects.
• Strong written communication skills including documentation.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.