Information Security Officer – Pune (Onsite)

About the role

We are seeking a proactive Information Security Officer to take ownership of our security posture. The role begins with structured, hands‑on training from a third‑party security vendor and evolves into full in‑house management of our security ecosystem.

Key responsibilities

• Receive deep, guided knowledge transfer on our security stack, including firewalls, EDR, SIEM, DLP, IAM, and email security.
• Lead internal security assessments and manage the audit trail from finding to closure.
• Act as the primary internal point of contact for external security audits, coordinating with IT, HR, Admin, and business teams.
• Gradually assume day‑to‑day administration of security tools, using the vendor as a backstop for complex tasks.
• Maintain documentation and ensure compliance with relevant security frameworks.

Required profile

• 3+ years of experience in IT security, security‑focused system administration, or IT audit/compliance.
• Working knowledge of network and endpoint security, access control, and basic incident response.
• Familiarity with security frameworks such as ISO 27001, NIST, or CIS Controls.
• Strong documentation and stakeholder coordination skills.
• Self‑driven, detail‑oriented, and comfortable learning new tools quickly.
• Bachelor's degree in Computer Science, IT, or a related field; CCISA certification is a plus.

Required skills

• Firewalls
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM)
• Data Loss Prevention (DLP)
• Identity and Access Management (IAM)
• Email security solutions
• Network security
• Endpoint security
• Access control mechanisms
• Incident response basics
• ISO 27001 framework
• NIST framework
• CIS Controls