Anthesis

Global ESG and decarbonization advisory

Senior Information Security Management System Compliance Manager

Security Governance, Risk & ComplianceUpdated on Nov 13

Full-timeIndiaNo salary listedHybrid

About the Job

Requirements

Strong understanding of ISO 27001:2022 requirements and certification processes.
Working knowledge of ISO/IEC 42001, NIST Cybersecurity Framework, SOC 2, GDPR, and related frameworks.
Experience managing audits, evidence collection, and corrective action programmes.
Strong stakeholder management and communication skills.
Ability to coordinate across Security, Legal, IT, Sales, and business functions.
Excellent documentation, organisation, and reporting capabilities.
Strong analytical and risk-based decision-making skills.
Ability to work independently across multiple priorities and time zones.
Bachelor’s degree in Information Security, Computer Science, Information Technology, Risk Management, Audit, or a related discipline.
8–10 years of experience in information security governance, compliance, ISMS management, audit, or risk management.
Demonstrable experience supporting or maintaining ISO 27001 certification programmes, audits, compliance assessments, evidence management, and regulatory requirements.
Professional proficiency in English.

Responsibilities

Maintain and continuously improve the ISO 27001:2022 ISMS.
Coordinate Wallbrook, Digital, and MERO certification scopes.
Manage surveillance and recertification audits.
Maintain the Statement of Applicability, policies, standards, procedures, and evidence.
Track findings, corrective actions, observations, and non-conformities, and ensure ongoing audit readiness.
Facilitate information security risk assessments and treatment activities.
Monitor control effectiveness and compliance obligations.
Support internal control reviews and assurance activities.
Maintain metrics, dashboards, and reports, and improve security policies and standards.
Support customer reviews, due diligence, vendor assurance, security assessments, and questionnaires.
Maintain evidence repositories and certification documentation.
Assist contract compliance reviews and support customer and procurement requirements.
Coordinate internal and external auditors.
Work with control owners to obtain evidence and implement corrective actions.
Guide business and technology stakeholders.
Support management reviews and executive reporting, and promote security awareness and governance maturity.
Support governance frameworks aligned with ISO/IEC 42001, including AI risk management, policy development, compliance activities, governance initiatives, and future certification readiness.
Perform other duties as assigned by the manager.

Desired Qualifications

ISO 27001 Lead Implementer or Lead Auditor certification.
ISO/IEC 42001 or AI governance experience.
Customer, vendor, or third-party assurance experience.
Certifications such as CISA, Security+, CRISC, or CISSP.

The Senior Information Security Governance Manager is responsible for maintaining Anthesis’ ISO 27001:2022 certifications across multiple business processes and ensuring the continued effectiveness of the Information Security Management System (ISMS).

The role provides governance, compliance, audit, and assurance support while contributing to customer trust, vendor assurance, and regulatory compliance initiatives. It coordinates certification activities, risk management, control monitoring, audit readiness, and compliance reporting, while supporting the future implementation of ISO/IEC 42001 and broader AI governance initiatives.

ISMS & Certification Management: Maintain and continuously improve the ISO 27001:2022 ISMS; coordinate Wallbrook, Digital, and MERO certification scopes; manage surveillance and recertification audits; maintain the Statement of Applicability, policies, standards, procedures, and evidence; track findings, corrective actions, observations, and non-conformities; and ensure ongoing audit readiness.
Governance, Risk & Compliance: Facilitate information security risk assessments and treatment activities; monitor control effectiveness and compliance obligations; support internal control reviews and assurance activities; maintain metrics, dashboards, and reports; and improve security policies and standards.
Client Assurance & Compliance Support: Support customer reviews, due diligence, vendor assurance, security assessments, and questionnaires; maintain evidence repositories and certification documentation; assist contract compliance reviews; and support customer and procurement requirements.
Audit & Stakeholder Management: Coordinate internal and external auditors; work with control owners to obtain evidence and implement corrective actions; guide business and technology stakeholders; support management reviews and executive reporting; and promote security awareness and governance maturity.
AI Governance Readiness: Support governance frameworks aligned with ISO/IEC 42001, including AI risk management, policy development, compliance activities, governance initiatives, and future certification readiness.
Other duties as assigned by the manager.

Competences and Skills

Strong understanding of ISO 27001:2022 requirements and certification processes.
Working knowledge of ISO/IEC 42001, NIST CSF, SOC 2, GDPR, and related frameworks.
Experience managing audits, evidence collection, and corrective action programmes.
Strong stakeholder management and communication skills.
Ability to coordinate across Security, Legal, IT, Sales, and business functions.
Excellent documentation, organisation, and reporting capabilities.
Strong analytical and risk-based decision-making skills.
Ability to work independently across multiple priorities and time zones.

Training and experience

Bachelor’s degree in Information Security, Computer Science, Information Technology, Risk Management, Audit, or a related discipline.
8-10 years of experience in information security governance, compliance, ISMS management, audit, or risk management.
Demonstrable experience supporting or maintaining ISO 27001 certification programmes, audits, compliance assessments, evidence management, and regulatory requirements.
Professional proficiency in English.

Desirable

ISO 27001 Lead Implementer or Lead Auditor certification; ISO/IEC 42001 or AI governance experience; customer, vendor, or third-party assurance experience; and certifications such as CISA, Security+, CRISC, or CISSP.

About the Company

Anthesis

Global ESG and decarbonization advisory

Anthesis is a global sustainability consultancy that helps organizations meet environmental, social, and governance (ESG) goals. It offers services in carbon strategy, sustainable finance, supply chain transparency, and net-zero decarbonization, delivered through advisory, digital tools, and educational programs. How it works: the company provides data-driven consulting, develops practical action plans, and uses software to monitor progress, enabling clients to set targets, implement decarbonization measures, and report on ESG metrics. How it differs: it combines expert advisory with digital solutions and training for a broad client base (corporations, governments, nonprofits), delivering end-to-end support from strategy to implementation rather than just recommendations. Its goal is to help clients reduce climate impact, improve resource efficiency, and advance social equity, building a more sustainable and resilient future.

Company size: 501-1,000
Company stage: Not listed
Total funding: Not listed
Headquarters: London, United Kingdom
Founded: 2013

Recently Posted Jobs

Explore more opportunities at Anthesis

See more jobs