Information Security Manager

Hi Everyone,

Hope youre doing well!

We have an urgent opening for a Manager ISMS & Data Privacy with one of our esteemed clients.
Client Location: Hyderabad

Employment Type: Fulltime
Experience Required: 8 12Years
Education: BE, MSc, MCA, Computer Science.

Job Description:

Role Overview

We are looking for a detail-oriented and experienced Manager – ISMS & Data Privacy to support end-to-end information security and privacy engagements. The role requires strong expertise in ISO 27001 implementation, policy & procedures drafting, audit handling, and DPDPA compliance, with hands-on experience in delivering client engagements across the ISMS lifecycle.

Key Responsibilities

ISMS & ISO 27001

• Lead and manage end-to-end ISMS implementations aligned with ISO 27001:2013 and ISO 27001:2022.
• Drive transition and implementation projects from ISO 27001:2013 to ISO 27001:2022.
• Develop, review, and update ISMS policies, procedures, and guidelines.
• Ensure policy lifecycle management – drafting, review, approval, and periodic updates.
• Conduct risk assessments (asset-based, process-based, and context-based approaches).
• Support control implementation, testing, and effectiveness reviews.
• Plan and execute internal audits and support external certification audits.
• Drive closure of audit findings (NCs, observations, improvements).

Risk Management & Compliance

• Perform information security risk assessments and maintain risk registers.
• Define and monitor risk treatment plans.
• Support regulatory and compliance requirements across clients.
• Ensure alignment with industry best practices and frameworks.

Data Privacy & DPDPA

• Work on DPDPA compliance programs (India-specific, beyond GDPR/HIPAA understanding).
• Conduct data mapping and data flow analysis across business processes.
• Create and maintain ROPA (Record of Processing Activities).
• Perform privacy gap assessments and DPIAs.
• Define and validate legal basis (consent, legitimate use, etc.).
• Support implementation of privacy policies and controls (not just drafting).
• Handle data principal rights management (requests, grievances, closures).
• Review and assess vendor contracts, DPAs, and third-party data sharing.

Audit & Stakeholder Management

• Manage client-facing engagements independently.
• Coordinate with stakeholders for evidence collection and audit readiness.
• Present findings, gaps, and recommendations to senior stakeholders.
• Ensure timely delivery of high-quality audit and compliance reports.

Required Skills & Competencies

• Strong knowledge of ISO 27001 (2013 & 2022) and control frameworks.
• Expertise in ISMS policy drafting and governance.
• Hands-on experience in risk assessment methodologies.
• Practical exposure to DPDPA and data privacy lifecycle activities.
• Strong documentation and report writing skills.
• Ability to manage multiple engagements and timelines.
• Good stakeholder communication and presentation skills.