12 ISO 9000 Jobs in India

Job Title: Auditor – Management Systems ( Chemical)

Location: Ahmedabad (with travel as required)

Employment Type: Full-Time

Workdays: Monday to Saturday

Role Overview:

The Auditor – Management Systems is responsible for planning, executing, and reporting audits of client organizations to evaluate their compliance with applicable ISO standards.

The auditor is expected to adhere to the principles of ISO/IEC 17021-1 and ISO 19011, ensuring audits are conducted with competence, impartiality, and consistency. The role also contributes to business development by identifying new opportunities and referring potential clients through professional interactions and personal networks.

Key Responsibilities:

1. Audit Planning and Preparation

• Review client scope, management system documentation, and audit history.

• Prepare risk-based audit plans, checklists, and schedules as per ISO 19011 and ISOQAR procedures.

• Coordinate with clients to finalize logistics and ensure audit readiness.

2. On-Site and Remote Auditing

• Conduct Stage 1, Stage 2, Surveillance, Re-certification, Transfer, and Special Audits.

• Evaluate conformity against applicable standards such as ISO 9001, 14001, 45001, 27001, 22000, 50001,

etc.

• Apply the process approach, risk-based thinking, and effective sampling techniques.

• Conduct opening and closing meetings, collect objective evidence, and record audit findings.

3. Reporting

• Prepare detailed, accurate, and timely audit reports, including observations, nonconformities, and

improvement opportunities.

• Submit reports and associated documentation as per internal timelines and quality requirements.

4. Client Engagement

• Interact professionally with client representatives across functions—Quality, EHS, IT, HR, Operations, and

Management.

• Provide clear and constructive feedback, explain audit findings, and guide clients on next steps without

consulting.

5. Compliance and Professional Development

• Maintain impartiality, confidentiality, and ethical conduct at all times.

• Comply with ISOQAR India’s internal procedures, accreditation requirements, and applicable standards.

• Participate in calibration meetings, witness audits, and refresher training programs.

• Continuously upgrade knowledge of standards, industry practices, and audit techniques in line with ISO

19011.

6. Business Development Support

• Identify potential business opportunities during client audits and share leads with the Business

Development team..

• Facilitate acquisition of new clients by leveraging professional connections and referring prospects from

your own network.

Qualifications:

Education:

• Bachelor’s degree in chemical engineering (B.E./B.Tech –

Mechanical/)

• Additional technical certifications relevant to industry sectors are a plus.

Professional Certifications:

• IRCA/CQI Certified Lead Auditor in ISO 9001, ISO 14001, ISO 45001 and ISO 50001 or willingness topursue these certifications before joining.

Experience:

• Minimum 5 years of relevant experience; 4+ years preferred.

• Minimum 15–20 third-party audits conducted (as Lead or Support Auditor). [Preferred]

• Exposure to Engineering & Industrial Manufacturing, Chemical & Petrochemical, Automotive,

Pharmaceutical, Metals, Oil & Gas, Infrastructure, or other relevant industrial sectors will be an added

advantage. [Preferred]

Skills & Competencies:

• In-depth knowledge of ISO standards and audit methodology.

• Familiarity with ISO 19011 auditing principles and techniques.

• Strong communication, analytical, and report-writing skills.

• Time and resource management across multi-location audits.

• Professionalism, integrity, and result orientation.

• Proficiency in MS Office

Job Title: Auditor – Management Systems (ISO Standards)

Location: Ahmedabad

Employment Type: Full Time

About the Role

We are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordinationWe are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordination

We are hiring an experienced Management System Auditor to conduct ISO audits, deliver quality assessment outcomes, and support certification activities. The ideal candidate should have hands on experience in ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 22000, ISO 50001, or other ISO standards, along with strong reporting and client handling skills.

The role involves extensive travel, interaction with clients across different industries, and compliance with ISO IEC 17021 1 and ISO 19011 guidelines.

Key Responsibilities

• Plan and conduct third-party certification audits, including Stage 1, Stage 2, Surveillance, and Re-certification audits.
• Assess client compliance with applicable ISO management system standards.
• Prepare audit plans, checklists, and detailed audit reports.
• Identify non-conformities, document audit findings, and ensure timely report submission.
• Coordinate with client teams and maintain professional audit practices.
• Identify potential business opportunities during client engagements.
• 
  

Mandatory Requirements

• Education: B.E./B.Tech in Electrical Engineering.
• Experience: Minimum 5 years of relevant professional experience; experience in third-party auditing is strongly preferred.
• Certifications: IRCA/CQI Lead Auditor certifications in ISO 9001, ISO 14001, ISO 45001, and ISO 50001, or willingness to obtain all required certifications before joining.
• Audit Experience: Exposure to certification audits, audit documentation, compliance assessments, and ISO audit methodologies.
• Industry Exposure: Electrical/Electronics Manufacturing, Power & Energy, Engineering, Automation, Infrastructure, or Renewable Energy is preferred.
• Strong communication, analytical, report-writing, and client-handling skills.
• Willingness to travel extensively (60–80%) across India and occasionally overseas.
• 
  

What This Role Offers

• Exposure to diverse industries and management system certification audits.
• Opportunities for professional development and continuous learning.
• Performance-based appraisal and competency development.

Role & Responsibilities:

As a Business Analyst, we will require that you interact with a multitude of leaders and managers, from customers, prospects, AI suppliers, Internal stake-holders from technology and quality assurance as well as the entire research, analysis, development, delivery and support teams.

This requires maturity, empathy and an engaging personality. You must have excellent presentation and communication skills, written, spoken and creative. We seek candidates who are passionate, committed, innovative, self-driven and result focused.

Towards this end, you would be involved in the following:

• Shape new concepts and features
• Work with global QHSE leaders and AI/ML teams
• Bring your expertise and certifications into product strategy
• Engage with clients worldwide
• Support delivery teams in transforming safety performance

Ideal Candidate:

• Strong Business Analyst – HSE (Ports & Terminals) Profiles
• Must have 7+ years of experience as a Business Analyst, with 3+ years within the Ports, Container Terminals, Shipping, or Maritime industry OR with 3+ years in Health, Safety and Environment
• Must have strong domain expertise in Health, Safety & Environment (HSE / QHSE) specifically in Ports and Terminals operations
• Must have hands-on experience with HSE / QHSE software products (implementation, configuration, rollout, or functional ownership) used in Ports or Terminals
• Must have proven experience in requirements gathering, gap analysis, and writing detailed functional specifications / FRDs for enterprise or ERP-style applications
• Must have strong client-facing experience, including stakeholder interactions, UAT coordination, go-live support, and post-implementation functional support
• Must be comfortable with onsite client visits, product delivery, and training end-users on the HSE software product
• Excellent communication, presentation, and stakeholder management skills with the ability to independently own functional delivery
• Technical qualification is not mandatory; strong functional, process, and domain expertise is essential
• Experience working with ERP or large enterprise applications in Ports, Container Terminals, Logistics, or Maritime environments.
• Exposure to QHSE / Safety Management Systems, ISO standards (ISO 45001, ISO 9001, ISO 14001), or regulatory compliance frameworks.
• NEBOSH / IOSH / ISM Code or equivalent HSE certifications.

Assistant Manager – Marketing

Remote Opportunity

Qualifications & Experience

Education:

• Bachelor's degree in Marketing, Mass Communication, Design, or Business

• Certification in Digital Marketing (Google, Meta, HubSpot, or similar) preferred

Experience:

• 4–7 years of experience in B2B marketing, preferably in certification, training, SaaS, consulting, or services

industry

• Experience leading multi-channel campaigns and content creation

• Prior exposure to compliance, ISO standards, ESG, or cyber/information security is an added advantage

Job description:

Company: Glan Management Consultancy

Location: Gurgaon

Experience: 7-15 year

Salary:

Employment Type:

Job Description:

Job Title: Manager Information Security – ITJob Purpose: Acting in a key technical management & execution capacity to provide a conduit between IT teams and key business stakeholders in your functional area of IT Security to ensure information technology needs are managed consistently, following professional IT and global standards, and delivered with a high level of quality and customer satisfaction.Reward level: Middle ManagementJob Location GurgaonExperience 10+ yearsRelevant Experience 7+ yearsReporting to: General ManagerQualification: Bachelor degree in ITKey Deliverables:

• Provide support as Lead auditor towards ISMS and PIMS policies, procedures, and guidelines and perform regular review and update.
• Perform deep assessment to gather evidence of continuous compliance with ISO 27001:2022 and ISO 27701:2019, DPDPA, IT Act and Cert In Regulation including audit logs, records of reviews, timely closure of open audit and risks and sharing the report with management.
• Conduct regular, documented information security and privacy risk assessments identifying assets, threats, vulnerabilities, likelihood, and impact with stakeholders.
• Prioritize identified vulnerabilities, detailed findings, remediation recommendations, trending reports on vulnerability posture towards closure with stakeholders.
• Development and implementation of a comprehensive, ongoing security awareness and training program for all employees.
• Encourage secure behaviours among colleagues and reinforce the importance of information security and privacy in daily operations.
• Prepare regular report on overall information security posture, GRC maturity, and risk landscape to relevant stakeholders
• Ability to collect lessons learned from incidents, audits, and assessments to drive continuous improvement in ISMS/PIMS and security processes.
• Key Relationships
• Internal IT and business customers.
• Global IT Vendor, market and global (HQ) colleagues, Local vendor partners
• Internal staff - direct reports (where applicable)IT vendors, contractors (where applicable)
• Knowledge Skills and Abilities:
• Must possess and demonstrate ISO 27001 Lead Implementer/Auditor and ISO 27701 Lead Implementer/Auditor certifications and knowledge.
• In depth understanding of IT Act, DPDPA, Cert In regulations, CIS Controls as well as UK DPA and ISO 31000
• Good to have certification on CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional) and Cloud Security certifications (e.g., CCSK, CCSP, vendor-specific like AWS Security Specialty)
• Familiarity with common vulnerability scanning tools like Qualys (features, reporting, agent-based vs. network scans) and Cloud Security Posture Management (CSPM) tools like Wiz (cloud service provider configurations, misconfigurations, compliance checks in AWS, Azure, GCP).
• Understanding of various penetration testing types (e.g., network, web application, API, mobile, cloud) and methodologies
• Knowledge of common attack vectors and exploitation techniques like MITRE ATTACK and DEFEND framework.
• Basic to intermediate knowledge of common security controls and technologies (e.g., firewalls, EDR, Cloud Security, VAPT tools, SIEM, WAF, DLP, encryption).
• Understanding of network protocols, operating systems (Windows, Linux), and common application architectures.
• Knowledge of audit principles and practices (internal and external audits).
• Understanding of corrective action planning and non-conformity management.
• Understanding of third-party risk management principles and vendor due diligence processes.
• Excellent technical writing skills for creating clear, concise, and comprehensive security policies, standards, and procedures.
• Ability to analyse complex risk data and present actionable insights.
• Hands-on experience with Qualys for configuring scans, analysing reports, and managing vulnerabilities.
• Hands-on experience with Wiz CSPM for monitoring cloud environments, identifying misconfigurations, and generating compliance reports.
• Proficiency with GRC platforms or tools for managing policies, risks, and controls
• Exceptional verbal and written communication skills to articulate complex security concepts to technical and non-technical stakeholders
• Ability to build strong relationships and collaborate effectively with diverse teams (IT, Legal, HR, Development, Business Units).
• Skills in influencing behaviour and driving change across the organization to improve security posture.
• Strong analytical skills to diagnose security issues, identify root causes, and develop effective solutions.
• Ability to critically evaluate security controls and identify gaps.
• Contract review and negotiation skills specifically for security-related services.
• Ability to effectively manage vendor relationships and performance.
• Ability to develop and deliver engaging security training sessions and awareness campaigns.
• Ability to stay updated with the latest security threats, vulnerabilities, technologies, and regulatory changes.
• Capacity to quickly learn and adapt to new tools and methodologies.
• Meticulous attention to detail in policy creation, audit documentation, and vulnerability analysis.
• Ability to act calmly and effectively during security incidents and contribute to incident response efforts.

mail updated resume with salary details-

Key Skill:

information security manager, IT security, ISO 27001 LA, ISO 27001 LI, ISO 27001 LI/LA, ISO 27701, ISO 31000, internal auditor, DPDPA, CISM, compliance ISO 27001:2022

Roles and Responsibilities:

• Develop and implement quality management systems.
• Conduct quality audits, analyses, and management to ensure compliance with ISO standards.
• Establish and maintain quality control standards and procedures
• Develop and implement checklists for quality documentation and inspection.
• Collaborate with cross-functional teams to identify areas for improvement in renewable energy projects.
• Evaluate the efficiency of existing quality systems and recommend improvements.
• Ensure timely completion of all quality-related tasks within budget constraints.
• Provide technical support to resolve quality-related issues during project execution.
• Oversee and manage high-capacity solar projects as the project head.
• Lead and manage teams efficiently to achieve project goals.

What will you do every day?

As a Security & Compliance Specialist, you are responsible for helping the implementation of the organization's information security and compliance programs. You will also help in implementing and reviewing data protection and privacy controls through technical, operational, and administrative measures. The ideal candidate will have good experience in Security in SaaS products, a deep understanding of regulatory requirements, and a proactive approach to managing security threats and third-party risks; someone who enjoys security work and possesses both deep and wide expertise in the security space.

Job Responsibilities

• Develop and Implement Security & Privacy Policies (Primary | Must have)
• Create and maintain comprehensive security policies and procedures for cloud environments and application security that align with organizational goals and regulatory requirements
• Ensure policies are regularly updated and communicated to relevant stakeholders; should be an SME for Enterprise Security and Privacy related activities
• Third-Party Risk Management (Primary | Must have)
• Handle the third-party risk management activities (TPRM) covering both inbound and outbound assessments (through the Customer & Vendor lifecycles)
• Collaborate with procurement and legal teams to ensure third-party contracts include appropriate security and compliance requirements (this includes reviews of MSA, Bids, RFP’s)
• Compliance Oversight (Primary | Must have)
• Ensure the organization’s compliance with relevant laws, regulations, and standards (e.g., GDPR, HIPAA, ISO 27001, ISO 27701, DPDP, SOC 2); should be an SME for compliance
• Implementation of minimum 3 standards from GDPR, HIPAA, ISO 27001, ISO 27701, DPDP, SOC 2
• Lead internal and external audits and manage responses to audit findings
• Product Security Practices (Primary | Must have)
• Integrate security practices into the software development lifecycle (SDLC) and review the releases based on the established Secure SDLC processes
• Review the Products from time to time checking the availability of enterprise security features
• Cloud & Infra Security (Secondary | Good to have)
• Implement, review and maintain robust security controls for cloud platforms (AWS/Azure/GCP) as per the industry best practices (DevSecOps)
• Perform security assessments/reviews and VA scans (non-mandatory) on cloud infra.
• Cybersecurity (Secondary | Good to have)
• Knowledge on Cyber Attack Vectors, Cyber Threat Intelligence, Attack Surface Mgmt., etc.
• Adequate knowledge on Incident Response, Business Resilience and Risk Management

Other responsibilities

• To act as a Security & Privacy champion/catalyst for all functions/BUs within the Company
• This role needs an avert-risk mindset and should handle Incident Management (able to Identify, Analyze, and Resolve Security Incidents)
• Contribute to the Cloud & CyberSecurity roadmap and act as an internal advisory/consultant
• Training entire staff about security and privacy best practices whenever necessary

Experience & Other Requirements

• Degree/Diploma in Computer Science / Information Technology / Cybersecurity or equivalent
• 3+ years (3-7) of experience in information security, with a focus on compliance
• Proven track record in implementing security and compliance policies & controls in a Product based Product company (preferably in a SaaS-based company)
• At least 3 years of working and implementation knowledge for any three of the compliances (ISO 27001, 27701, GDPR, HIPAA, SOC 2, DPDP)
• Good to have working knowledge of Cloud security practices & involved in DevSecOps activities
• Good research mindset with a zeal to explore, learn, share, and implement
• Preferable who can join in 30 days

1.      Core Responsibilities

·      Review, suggest and implement enhancements/Bug fixes to the ServiceNow platform.

·      Work closely with other IT teams to help implement integrations from other platforms(like Monitoring tools: Nagios, Prometheus, Sematext, Dynatrace etc., )  into the ServiceNow ecosystem.

·      Attend important business meetings to gather information around projects pertaining to ServiceNow.

·      Help to maintain and improve the CMDB by collaborating with key stakeholders to ensure the correct data is being maintained.

·      Help to manage the platform to ensure a reliable seamless user experience.

·      Develop and maintain service catalogue items by collaborating with key stakeholders across the business.

·      Support the banks audit requirements around the ServiceNow platform by helping to provide reports and audits as required.

·      Support audit requirements and compliance to standards

·      Should have knowledge on creating customized Dashboards & Reports

·      Automation using ServiceNow (like Major Incident Management, Incident Reduction, Problem Management etc.,) , if any

·      Should be able to drive Service Improvement Plan’s in optimizing ServiceNow platform on their own

·      Maintain the company’s compliance standards and ensure timely completion of all mandatory on-line training modules and attestations.

2.      Experience Requirements

Essential:

·      4 to 6 years previous experience in ServiceNow administration OR Technical work on ServiceNow design and implementation is essential

·      4 to 6 years previous experience in delivering ServiceNow projects (new modules, improvements, enhancements etc.) is essential

·      4 to 6 years previous experience or equivalent qualification in Service Now ITSM & ITOM is essential

·      8 to 10 years overall experience in IT is essential

Desirable

·      3 to 5 years’ experience in orchestration, service mapping is desirable

3.      Knowledge Requirements

Essential

·      Very good knowledge of Incident Management, Request Fulfilment, Change Management, Problem Management processes

·      Very good knowledge of ITSM and ITOM practices is essential

·      Detailed knowledge of the ITIL/ITSM Best practices is essential

Desirable

·      Good understanding of CSDM is desirable

·      Good knowledge of the ISO 20K, 27K, 9K is desirable

·      Basic knowledge of IT Infrastructure technologies used in a banking domain in desirable

Roles and responsibilities:

- Audit the current Information Security system and procedures and do a Gap analysis

- Identify immediate potential Information Security Risks and manage remediation tasks through to closure

- Create an Information Security Compliance Roadmap and execute end-to-end compliance initiatives by that roadmap

- Design high-quality test plans and direct Data/Information security control test activities

- Continuously improve Octro Data/Information security control framework

- Maintain handbook pages and procedures related to Information security compliance

- Identify opportunities for Information security compliance control automation, execute them and then maintain

- Provide actionable and constructive advisement to cross-functional teams, including driving remediation activities for high and select moderate-risk Observations across all Octro departments

- Design, develop, and deploy scripts to automate continuous control monitoring, administrative tasks and metric reporting for all security compliance programs

- Direct and support external audits as and when necessary

Requirements

- A minimum of 6-8 years' experience working with Data/Information Security Compliance programs

- Detailed knowledge of common information security management frameworks, regulatory requirements and applicable standards such as: ISO, SOC 2, GDPR, PCI etc.

About Octro Inc :

We are one of the fastest-growing mobile gaming companies around, a technology-driven organization at heart, and take pride in the platforms we create.

Founded in 2006 with a mission to create productivity applications for Mobile Devices. After pioneering one of the first mobile Voice-over-IP infrastructures called OctroTalk, the company ventured into building mobile gaming platforms. Sequoia Capital has invested in Octro. The funding was announced in June 2014.

Hiring for Lead Auditor (QMS / ISMS) role.

Job description Below :

• Preparation Dept. Objective reports.
• Preparation of Internal Audit Schedule & Coordination /opening meeting and closing meeting.
• Follow up for Internal Audit closing of Observations.
• Preparation of Management review meeting Input & Output reports.
• Coordination Certification Audit and Surveillance (TUV-SUD) Audit for ISO 9001:2015 and ISO 27001:2013.
• Follow up for closing of Observations.
• To update QMS & ISMS Manual, Procedures, Policies, Risk Assessment Plan, SOA & Formats.
• Internal Audit of ISO - QMS & ISMS standards.

Dear Candidate,

Greetings from HCL Technologies Ltd.

• Make sense of Cyber security and compliance frameworks that apply to your business or industry
  • Identify business risks, taking into account the role of your hosting service provider
  • Determine which Cyber security controls are required to mitigate your identified risks
  • Improve collaboration and communication during Cyber security Incident mitigation and response.
  • Establish the necessary framework based on NIST Framework to maintain and continually improve your information security program over time based on evolving scope and emerging risks
  • Document and track efforts for evidence collection and audit preparation

• will have primary responsibility for coordinating and implementing effective Cyber Security management across the account. This role will ensure that all Supplier obligations are met regarding compliance with Security guidelines, data protection, regulations, Supplier policies, and key controls.
• provide implementation and ongoing operation of Security management framework;
• be responsible for coordinating activities to address the key Security risk exposures;
• ensure Security awareness training of, and assistance in the implementation of robust Security management practices across Security operations;
• direct the design of controls to address emerging or new Security risk and compliance requirements;
• carry out regular and frequent assurance reviews of the design and operating effectiveness of Security controls;
• implement, monitor and report on key Security risk indicators to identify and address emerging risks;
• coordinate with other Service Providers and Security functions, to facilitate client’s audits and inspections;
• manage and report on responses and actions to address Security audit points, inspection deficiencies, or control weakness identified during normal operations.
• review outcome of cyber security risk assessment, timely implement open action items and report progress to stakeholders
• incorporate vulnerability testing as an integral part of change management
• Should have good knowledge of Cyber Security Framework and controls
• CISA ,CISM or CISSP certification should be preferred.
• Have good understanding of Security policy and process along with ITSM process.

Nucleus Softwares: Senior Quality Lead

NOIDA

Job Role:

• Associate Manager  for Nucleus Product, Implementation,  Support and Services projects
• Sound Knowledge of Quality Management Processes and Software Development Lifecycle
• Experience in IT Organization
• Strong knowledge of industry best practices including Agile, CMMI, PMBOK, ISO, Six Sigma
• Strong knowledge of key areas of project management including  Schedule, Quality and Risk Management
• Strong insights about Quality Measurement Framework & Metrics
• Proven internal stakeholders management skills
• Strong verbal and written communication skill
• Proactive outlook and approach

Job Responsibilities:

Software Quality Assurance

• Liaison with business heads, program manager and team to maintain continuous process implementation and improvements
• Identify improvement areas and raise right alert at the right time
• Ensure timely reporting of metrics and dashboard
• Ensure information readiness for quick reference
• Consistently strong performance as a quality management professional
• Strong insight on Defect Prevention and Causal Analysis
• Assist and support business leaders in driving various Quality Management programs and initiatives

Desired for the Role:

• Qualification: MCA / M.Sc. Computer Science
• 7-12 years of experience, good insights of the prevailing Quality Management Standards
• Good Knowledge of Microsoft Office, Microsoft Project, JIRA, SVN, SharePoint
• Strong analytical skills and knowledge of analytical tools.
• Strong experience of planning and managing Audits and Reviews
• Team player with highly collaborative mind set
• Needs to be go getter, highly motivated professional

Future Career Progression:

Nucleus is well known for identifying, nurturing and promoting the internal talent and having long mutually rewarding associations with its performing associates.  Our focus programs helps our associates to continuously grow based on their capability, performance and career aspirations. 

Over coming years, this role can evolve, either in the area of SEPG and  Analytics