ISMS Consultant

'

: - ( -. )

Experience: 3+ yrs

Location: Bengaluru, Karnataka, India, Bengaluru

Job Type: Full-time

We are seeking a detail-oriented Information Security Implementation Engineer to support the implementation and maintenance of information security and privacy controls aligned with internationally recognized standards, including ISO/IEC 27001 and ISO/IEC 27701. This role is ideal for professionals with a strong foundation in IT infrastructure, cybersecurity, and compliance who are passionate about strengthening enterprise security frameworks.

As an Information Security Implementation Engineer, you will collaborate with IT, infrastructure, and cross-functional teams to implement technical and operational security controls, maintain compliance documentation, support audit readiness, and drive continuous improvements across the organization's information security environment. The role offers an opportunity to work on enterprise security initiatives, governance activities, and regulatory compliance programs.

Key Responsibilities

• Support the implementation of technical and operational controls aligned with ISO/IEC 27001 and ISO/IEC 27701 requirements.
• Coordinate with IT infrastructure teams to implement security controls across servers, endpoints, network devices, and enterprise applications.
• Assist in asset inventory management, asset classification, ownership assignment, and asset lifecycle governance.
• Implement and monitor endpoint security controls including antivirus, endpoint protection, device encryption, screen lock policies, removable media controls, and secure system configurations.
• Support user identity and access management activities including user provisioning, privilege reviews, access validation, and account de-provisioning.
• Coordinate vulnerability assessments, remediation activities, and timely closure of identified security gaps.
• Support backup management, restoration testing, and monitoring processes to ensure business continuity.
• Assist in implementing secure configuration baselines, system hardening, and infrastructure security best practices.
• Support physical security initiatives including asset tagging, server room security, visitor access management, and secure media handling procedures.
• Prepare, organize, and maintain implementation evidence, asset registers, configuration records, and documentation required for internal reviews and certification audits.
• Coordinate with internal stakeholders to ensure timely completion of security implementation activities and audit observations.
• Participate in compliance reviews, audit readiness activities, and continuous improvement initiatives.

What Makes You a Great Fit

• 3+ years of experience in Information Security, IT Infrastructure, Cybersecurity, or Compliance-related roles.
• Good understanding of ISO/IEC 27001, ISO/IEC 27701, and information security management principles.
• Experience implementing endpoint security, access management, asset management, and infrastructure security controls.
• Knowledge of vulnerability assessment, remediation management, system hardening, and secure configuration practices.
• Familiarity with backup management, disaster recovery, and business continuity processes.
• Understanding of network security, server security, endpoint protection, and enterprise security technologies.
• Experience maintaining security documentation, implementation evidence, and audit records.
• Strong analytical, organizational, and problem-solving skills with excellent attention to detail.
• Ability to collaborate effectively with IT, infrastructure, compliance, and business teams.
• A proactive mindset with a strong commitment to security best practices, regulatory compliance, and continuous improvement.