Information Security Manager- ISO 27001 LA

at vaaragonenterprisescom

Information Security Manager- ISO 27001 LA

vaaragonenterprisescom

Company

Home

Information Security Manager- ISO 27001 LA

at vaaragonenterprisescom

Posted by satish agrawal

7 - 15 yrs

₹18L - ₹30L / yr

Gurugram

Skills

Information security

ISO/IEC 27000-series

ISO 27001 LA

CISM

UK DPA

ISO 31000

Job Title: Manager Information Security – IT

Job Purpose: Acting in a key technical management & execution capacity to

provide a conduit between IT teams and key business stakeholders in your

functional area of IT Security to ensure information technology needs are

managed consistently, following professional IT and global standards, and

delivered with a high level of quality and customer satisfaction.

Reward level: Middle Management

Job Location Gurgaon

Experience 10+ years

Relevant Experience 7+ years

Reporting to: General Manager

Qualification: Bachelor’s degree in IT

Key Deliverables:

 Provide support as Lead auditor towards ISMS and PIMS policies,

procedures, and guidelines and perform regular review and update.

 Perform deep assessment to gather evidence of continuous compliance with

ISO 27001:2022 and ISO 27701:2019, DPDPA, IT Act and Cert In Regulation

including audit logs, records of reviews, timely closure of open audit and risks

and sharing the report with management.

 Conduct regular, documented information security and privacy risk

assessments identifying assets, threats, vulnerabilities, likelihood, and impact

with stakeholders.

 Prioritize identified vulnerabilities, detailed findings, remediation

recommendations, trending reports on vulnerability posture towards closure

with stakeholders.

 Development and implementation of a comprehensive, ongoing security

awareness and training program for all employees.

 Encourage secure behaviours among colleagues and reinforce the

importance of information security and privacy in daily operations.

 Prepare regular report on overall information security posture, GRC maturity,

and risk landscape to relevant stakeholders

 Ability to collect lessons learned from incidents, audits, and assessments to

drive continuous improvement in ISMS/PIMS and security processes.

Key Relationships:

 Internal IT and business customers in MSR.

 Global IT Vendor, market and global (HQ) colleagues, Local vendor partners

 Internal staff - direct reports (where applicable)

 IT vendors, contractors (where applicable)

Knowledge Skills and Abilities:

 Must possess and demonstrate ISO 27001 Lead Implementer/Auditor and ISO

27701 Lead Implementer/Auditor certifications and knowledge.

 In depth understanding of IT Act, DPDPA, Cert In regulations, CIS Controls as

well as UK DPA and ISO 31000

 Good to have certification on CISM (Certified Information Security Manager),

CISSP (Certified Information Systems Security Professional) and Cloud Security

certifications (e.g., CCSK, CCSP, vendor-specific like AWS Security Specialty)

 Familiarity with common vulnerability scanning tools like Qualys (features,

reporting, agent-based vs. network scans) and Cloud Security Posture

Management (CSPM) tools like Wiz (cloud service provider configurations,

misconfigurations, compliance checks in AWS, Azure, GCP).

 Understanding of various penetration testing types (e.g., network, web

application, API, mobile, cloud) and methodologies

 Knowledge of common attack vectors and exploitation techniques like MITRE

ATTACK and DEFEND framework.

 Basic to intermediate knowledge of common security controls and technologies

(e.g., firewalls, EDR, Cloud Security, VAPT tools, SIEM, WAF, DLP, encryption).

 Understanding of network protocols, operating systems (Windows, Linux), and

common application architectures.

 Knowledge of audit principles and practices (internal and external audits).

 Understanding of corrective action planning and non-conformity management.

 Understanding of third-party risk management principles and vendor due

diligence processes.

 Excellent technical writing skills for creating clear, concise, and comprehensive

security policies, standards, and procedures.

 Ability to analyse complex risk data and present actionable insights.

 Hands-on experience with Qualys for configuring scans, analysing reports, and

managing vulnerabilities.

 Hands-on experience with Wiz CSPM for monitoring cloud environments,

identifying misconfigurations, and generating compliance reports.

 Proficiency with GRC platforms or tools for managing policies, risks, and controls

 Exceptional verbal and written communication skills to articulate complex security

concepts to technical and non-technical stakeholders

 Ability to build strong relationships and collaborate effectively with diverse teams

(IT, Legal, HR, Development, Business Units).

 Skills in influencing behaviour and driving change across the organization to

improve security posture.

 Strong analytical skills to diagnose security issues, identify root causes, and

develop effective solutions.

 Ability to critically evaluate security controls and identify gaps.

 Contract review and negotiation skills specifically for security-related services.

 Ability to effectively manage vendor relationships and performance.

 Ability to develop and deliver engaging security training sessions and awareness

campaigns.

 Ability to stay updated with the latest security threats, vulnerabilities,

technologies, and regulatory changes.

 Capacity to quickly learn and adapt to new tools and methodologies.

 Meticulous attention to detail in policy creation, audit documentation, and

vulnerability analysis.

 Ability to act calmly and effectively during security incidents and contribute to

incident response efforts.

mail updated resume with salary details-

email: etalenthire[t]gmail[dot]com

satish- 88O 27 49 743

Job Title: Manager Information Security – IT

Job Purpose: Acting in a key technical management & execution capacity to

provide a conduit between IT teams and key business stakeholders in your

functional area of IT Security to ensure information technology needs are

managed consistently, following professional IT and global standards, and

delivered with a high level of quality and customer satisfaction.

Reward level: Middle Management

Job Location Gurgaon

Experience 10+ years

Relevant Experience 7+ years

Reporting to: General Manager

Qualification: Bachelor’s degree in IT

Key Deliverables:

 Provide support as Lead auditor towards ISMS and PIMS policies,

procedures, and guidelines and perform regular review and update.

 Perform deep assessment to gather evidence of continuous compliance with

ISO 27001:2022 and ISO 27701:2019, DPDPA, IT Act and Cert In Regulation

including audit logs, records of reviews, timely closure of open audit and risks

and sharing the report with management.

 Conduct regular, documented information security and privacy risk

assessments identifying assets, threats, vulnerabilities, likelihood, and impact

with stakeholders.

 Prioritize identified vulnerabilities, detailed findings, remediation

recommendations, trending reports on vulnerability posture towards closure

with stakeholders.

 Development and implementation of a comprehensive, ongoing security

awareness and training program for all employees.

 Encourage secure behaviours among colleagues and reinforce the

importance of information security and privacy in daily operations.

 Prepare regular report on overall information security posture, GRC maturity,

and risk landscape to relevant stakeholders

 Ability to collect lessons learned from incidents, audits, and assessments to

drive continuous improvement in ISMS/PIMS and security processes.

Key Relationships:

 Internal IT and business customers in MSR.

 Global IT Vendor, market and global (HQ) colleagues, Local vendor partners

 Internal staff - direct reports (where applicable)

 IT vendors, contractors (where applicable)

Knowledge Skills and Abilities:

 Must possess and demonstrate ISO 27001 Lead Implementer/Auditor and ISO

27701 Lead Implementer/Auditor certifications and knowledge.

 In depth understanding of IT Act, DPDPA, Cert In regulations, CIS Controls as

well as UK DPA and ISO 31000

 Good to have certification on CISM (Certified Information Security Manager),

CISSP (Certified Information Systems Security Professional) and Cloud Security

certifications (e.g., CCSK, CCSP, vendor-specific like AWS Security Specialty)

 Familiarity with common vulnerability scanning tools like Qualys (features,

reporting, agent-based vs. network scans) and Cloud Security Posture

Management (CSPM) tools like Wiz (cloud service provider configurations,

misconfigurations, compliance checks in AWS, Azure, GCP).

 Understanding of various penetration testing types (e.g., network, web

application, API, mobile, cloud) and methodologies

 Knowledge of common attack vectors and exploitation techniques like MITRE

ATTACK and DEFEND framework.

 Basic to intermediate knowledge of common security controls and technologies

(e.g., firewalls, EDR, Cloud Security, VAPT tools, SIEM, WAF, DLP, encryption).

 Understanding of network protocols, operating systems (Windows, Linux), and

common application architectures.

 Knowledge of audit principles and practices (internal and external audits).

 Understanding of corrective action planning and non-conformity management.

 Understanding of third-party risk management principles and vendor due

diligence processes.

 Excellent technical writing skills for creating clear, concise, and comprehensive

security policies, standards, and procedures.

 Ability to analyse complex risk data and present actionable insights.

 Hands-on experience with Qualys for configuring scans, analysing reports, and

managing vulnerabilities.

 Hands-on experience with Wiz CSPM for monitoring cloud environments,

identifying misconfigurations, and generating compliance reports.

 Proficiency with GRC platforms or tools for managing policies, risks, and controls

 Exceptional verbal and written communication skills to articulate complex security

concepts to technical and non-technical stakeholders

 Ability to build strong relationships and collaborate effectively with diverse teams

(IT, Legal, HR, Development, Business Units).

 Skills in influencing behaviour and driving change across the organization to

improve security posture.

 Strong analytical skills to diagnose security issues, identify root causes, and

develop effective solutions.

 Ability to critically evaluate security controls and identify gaps.

 Contract review and negotiation skills specifically for security-related services.

 Ability to effectively manage vendor relationships and performance.

 Ability to develop and deliver engaging security training sessions and awareness

campaigns.

 Ability to stay updated with the latest security threats, vulnerabilities,

technologies, and regulatory changes.

 Capacity to quickly learn and adapt to new tools and methodologies.

 Meticulous attention to detail in policy creation, audit documentation, and

vulnerability analysis.

 Ability to act calmly and effectively during security incidents and contribute to

incident response efforts.

mail updated resume with salary details-

email: etalenthire[t]gmail[dot]com

satish- 88O 27 49 743

Users love Cutshort

Read about what our users have to say about finding their next opportunity on Cutshort.

Shubham Vishwakarma

Full Stack Developer - Averlon

I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.

Companies hiring on Cutshort

About vaaragonenterprisescom

Founded :

2023

Type :

Services

Size :

0-20

Stage :

Bootstrapped

About

N/A

Company social profiles

N/A

Similar jobs

QA Engineer

Hunarstreet Technologies pvt ltd

Agency job

via Hunarstreet Technologies Pvt Ltd by Shayada Ali

Jaipur

3 - 8 yrs

₹6L - ₹9L / yr

Automation

Manual testing

Systems Development Life Cycle (SDLC)

STLC

API

+13 more

POSITION: QA Engineer

JOB OVERVIEW:

We are looking for a QA Engineer to assess software quality through Manual and Automated Testing. You will be responsible for finding and reporting software bugs and glitches. You should have a keen eye for details and must be competent in executing test cases. You should also possess excellent communication and problem-solving skills and should be passionate about quality ensuring that our products, applications, and systems work correctly.

WHAT YOU WILL DO:

● Testing life cycle SDLC STLC.

● Analysis of the requirement Design & Implement functional test-cases.

● Reviewing software requirements and preparing test scenarios.

● Executing tests on software usability.

● Analyzing test results on database impacts, errors or bugs, and usability.

● Preparing reports on all aspects related to the software testing carried out and reporting to the design team.

● Interacting with clients to understand product requirements.

● Participating in design reviews and providing input on requirements, product design, and potential problems.

● Ensure complete test -coverage, interact with Product management development team & different stakeholders.

● Involve in Test-plan, Test scenario Test strategy review. Participate in the defect triage call, use the existing Tool & built the new Test script

● Hands-on API testing with REST Assured, Postman, Swagger.

● Should be having a good Analytical Skill.

● Should be expert in SQL severRedshift & web service testing.

● Expert in Agile & waterfall methodology & feature file writing.

● Assist in setting up & built the new Test- environments.

● Helping in new processes & procedures.

● Candidate must have good understanding of Automation Framework

● Test Execution (Expert) - Deep dive into large volumes of data comparison validation

● Test Framework (Expert) - Solid understanding of Test Phases, Type of testing to be undertaken & be able to perform them. Risk gate assessments for entry & exit criteria's. Test outputs - plan, cases, results, sign off reports.

REQUIRED SKILLS

● Must have strong experience working in the Software Testing field throughout the career across all phases of software development life cycle.

● SAAS application testing experience

● Must have exposure as well as hands on experience of manual as well as performance testing for various web based, mobile based and desktop-based Software Products and Application projects.

● Must have strong hands-on experience of various types of testing including end to end functional testing,UIUX, Performance, Security, Architecture, Websites and Performance testing etc.

● Must have led various software testing projects end to end including Test Plans & Test Cases

preparation, Effort Estimation, Test Reporting, Project Coordination activities for various projects.

● Knowledge of Database testing over MySQL or other relational non-relational databases is a plus.

● Strong experience with Automation tools including Selenium and others for testing Web basedRESTAPIsWeb ServicesSchedulersBatches & Event driven applications.

● Knowledge of at least one Programming language & coding on an Automation framework is plus.

● Must have familiarity to leading tools for requirement management, test case management, bug

management and version control.

● Should have strong documentation and verbal communication skills and excellent aptitude.

● Good to have: JIRA, Lean FT, Jenkins