Quest Global

Engineering services, digital transformation, asset management

ISMS Compliance Deputy Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

Ability to define problems, collect data, establish facts, and draw valid conclusions.
Ability to work independently and make urgent decisions independently.
Ability to present information effectively and respond to questions from top management, groups of managers, and customers.
Experience developing policies, standards, and procedures according to ISO/IEC 27001, TISAX, and other information security standards and frameworks.
Auditing skills, including distinguishing observations from non-conformities, analyzing audit findings for trends, and identifying weak areas.
Knowledge of GDPR and DPDPA regulations, requirements, and implementation.
Hands-on experience conducting process training and facilitating external certification audits.
Implementation knowledge of business continuity and disaster recovery policies and procedures at organizational and customer-account levels.
A Bachelor’s or Master’s degree or higher in Computer Science, Information Systems, or a related field.
At least 10–15 years of experience in computing or a related area, focused on information security activities.
Lead Auditor qualification on ISO/IEC 27001 and other security-related frameworks.

Responsibilities

Develop and revise information security policies and procedures.
Initiate, facilitate, and promote activities that create information security awareness within the organization.
Manage information security exception requests by resolving service requests.
Support and facilitate customer and third-party information security audits.
Plan and perform internal audits and technical compliance checks.
Support completion of RFI, RFP, customer contract, and statement-of-work requirements.
Organize and conduct ISMS core-team meetings and the security council.
Facilitate process owners in performing risk assessments and mitigation actions.
Facilitate process owners in performing root-cause analysis for critical incidents and other non-conformities identified during internal, external, or customer audits.
Monitor compliance with information security policies and procedures, refer problems to the appropriate function or operations manager, and report to the CISO.
Develop and supervise information security measures across the organization.
Advise the team on current information security technologies and related regulatory issues.
Assist the business continuity and disaster recovery team in establishing a robust business continuity and disaster recovery framework.
Manage customer-specific compliance according to customer requirements.

Desired Qualifications

Professional information technology security-related certifications are an added advantage.

Job Requirements Job Description:Incumbent serves as an information security executive and will be required to work with information security team members from respective work area Job Designation: ISMS Compliance Senior Executive / Asst. Manager Key Responsibilities:<ul><li>Develops & revises information security policies & procedures</li><li>Initiates, facilitates and promotes activities to create information security awareness within the organization</li><li>Managing Information Security Exception Management by resolving service requests </li><li>Supports and Facilitates Customer and 3rd Party Information Security Audits</li><li>Plans and performs internal audit and technical compliance checks</li><li> Provide necessary support in filling out RFI/RFP/Customer Contracts/SOW requirements</li><li>Organizes & conducts ISMS core team meetings and security council</li><li>Facilitates the process owners in performing the risk assessment & mitigation actions</li><li>Facilitates the process owners in performing the root cause analysis for the critical incidents & other non-conformities identified during internal / external / customer audits</li><li>Monitors compliance with information security policies and procedures, referring problems to the appropriate Function / Operation Manager and report to CISO</li><li>Develops and supervises all information security measures in the organization</li><li>Advises the team with current details about information security technologies and related regulatory issues </li><li>Assists the BCP / DR team in establishing the robust framework on business continuity & disaster recovery</li><li>Managing customer specific compliance as per customer requirements</li></ul> General Skills and Specifications:<ul><li>Ability to define problems, collect data, establish facts, and draw valid conclusions</li><li>Ability to work independently and to take emergent decisions on his/her own</li><li>Ability to effectively present information and respond to questions from top management, groups of managers and customers</li><li>Experience across developing policies, standards, and procedures as per ISO/IEC 27001, TiSAX and other information security related standards / frameworks</li><li>Strong Auditing skill, well differentiation between observation & Non-conformances. Analysis of Audit findings to indicate trend and identify the weak area </li><li>Good knowledge of GDPR and DPDPA regulations / requirements and implementation</li><li>Hands on on conducting process trainings and facilitate eternal certification audits</li><li>Implementation knowledge on BCP and DR policies / procedures at Org level and customer account level</li><li>Excellent interpersonal communication and organizational skills with demonstrated abilities in team crisis management. Good team player, Strong team orientation & leadership qualities, hardworking, enthusiastic with good attitude</li></ul>Education & Qualifications:<ul><li>Bachelor’s degree / Master’s Degree or higher in Computer Science, Information Systems or a related field.</li><li>At least 10-15 years of experience in computing or related area with a focus on information security related activities.</li><li>Lead Auditor on ISO/IEC 27001 standard and other security related frameworks</li></ul>Professional IT security related certifications is an added advantage. Work Experience Education & Qualifications:<ul><li>Bachelor’s degree / Master’s Degree or higher in Computer Science, Information Systems or a related field.</li><li>At least 10-15 years of experience in computing or related area with a focus on information security related activities.</li><li>Lead Auditor on ISO/IEC 27001 standard and other security related frameworks</li></ul>Professional IT security related certifications is an added advantage

About the Company

Quest Global

Engineering services, digital transformation, asset management

QuEST Global provides engineering and lifecycle services across aerospace, automotive, energy, healthcare, and transportation, focusing on digital transformation and asset management. It uses edge computing, cloud, AI/ML, and industrial IoT to deliver tailored engineering solutions through long-term partnerships, service contracts, project-based engagements, and strategic collaborations. It differentiates itself with a broad industry footprint, global delivery model, and emphasis on partnerships, talent development, and workplace culture. Its goal is to help clients improve operational efficiency and drive business growth by transforming engineering processes and assets with digital tools and data-driven management.

Company size: 10,001+
Company stage: Growth Equity (Venture Capital)
Total funding: $581M
Headquarters: Greenville, SC
Founded: 1997

Recently Posted Jobs

Explore more opportunities at Quest Global

See more jobs