Information Security Officer (ISO)

About the role

The Information Security Officer (ISO) will lead the development, implementation, and maintenance of the organisation's information security framework. Based in Coimbatore, the role focuses on safeguarding systems, applications, and data against cyber threats while ensuring compliance with key standards and regulations.

Key responsibilities

• Develop, implement and maintain security policies, standards and procedures.
• Conduct risk, vulnerability and compliance assessments across the IT landscape.
• Monitor, investigate and respond to cybersecurity incidents and breaches.
• Ensure adherence to ISO/IEC 27001:2022, GDPR and other data‑privacy regulations.
• Coordinate internal and external security audits and close findings promptly.
• Review ERP applications, workflows and integrations for security and privacy compliance.
• Collaborate with IT and business teams to apply appropriate security controls.
• Maintain documentation such as risk registers, incident reports and compliance records.
• Design and deliver security awareness and training programs.
• Support disaster recovery and business continuity planning and testing.
• Monitor emerging threats and recommend improvements.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• 3–5 years of experience in information security, cybersecurity or IT risk management.
• Relevant certifications such as CISSP or CISM are preferred.

Required skills

• Network security
• Endpoint security
• Cloud security (AWS, Azure, GCP)
• Identity & Access Management (IAM)
• ISO 27001 implementation and auditing
• GDPR and data‑privacy compliance
• Risk and vulnerability assessments
• Incident response and security monitoring
• ERP security review