BENGALURU · FULLTIME
Information Security Consultant (6 months)
Qure.ai
Bengaluru · onsite · Posted 4d ago
Sourced from
Undisclosed0–3 yrsfulltimeBengaluru
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
":"
Location: Bengaluru, India (Hybrid)
Experience: 1-2 years
Type: Full-time Consultant (6 months)
Department: Information Security
About Us
Qure.ai is a global healthtech company using artificial intelligence to improve disease detection and patient outcomes at scale. Our solutions are deployed across hospitals, diagnostic networks, and public health programs worldwide.
Today, our technology has impacted 40M+ lives across 105+ countries , deployed across 5,200+ sites , and powered by one of the world largest real-world medical imaging datasets. With 26 FDA-cleared indications , we are helping shape the future of AI-driven healthcare.
The Opportunity
As a healthtech company working with hospitals and public health programs across 105+ countries, earning and keeping customer trust in how we protect data is central to everything we do. Our ISO 27001 certification and SOC 2 Type II report are how we prove it.
We are looking for an Information Security Consultant to own and mature our information security and compliance program. You will run our ISO 27001 ISMS and SOC 2 Type II audits, keep our controls healthy year-round, and be a trusted partner to engineering, IT and customer-facing teams.
What You Own & Drive
- ISO 27001 ISMS: Maintain Qure ISMS end to end, including scope, Statement of Applicability, risk register, risk treatment plans and the full set of Annex A controls.
- SOC 2 Type II: Run the annual audit cycle, from control mapping and continuous evidence collection through auditor walkthroughs, sample requests and closure of exceptions.
- Audits: Plan and run internal audits, coordinate surveillance and recertification audits with external auditors, and drive corrective actions to closure on time.
- Policies & procedures: Own, review and update information security policies, standards and SOPs at least annually, and get them approved and acknowledged across teams.
- Risk management: Run periodic information security risk assessments, track risks with clear owners and due dates, and report status to leadership.
- Vendor security: Assess third-party and sub-processor risk through questionnaires, report reviews (SOC 2 / ISO certificates) and contract security clauses.
- Customer trust: Answer security questionnaires, RFP security sections and customer audit requests from hospitals, health systems and partners worldwide.
- Access & asset hygiene: Run quarterly user access reviews, maintain the asset inventory and track joiner-mover-leaver controls with IT and HR.
- Vulnerability management: Own the vulnerability management process end to end. Coordinate regular scans and annual third-party penetration tests, triage findings by severity, track remediation with Engineering and IT against agreed SLAs, and report on open and overdue vulnerabilities.
- Security awareness: Run onboarding and annual security and privacy training, phishing simulations and track completion across the company.
- Incident & continuity: Maintain the incident response, business continuity and disaster recovery plans, run tabletop exercises and support incident handling.
- Cross-functional partnership:
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
business continuityDisaster recoveryIncident ResponseIso 27001diagnosticmedical imagingauditshealthtechMappingISMSPhishingIncident HandlingHealthcareOnboardingInformation SecuritycomplianceArtificial Intelligence
Section · Company
About Qure.ai
Qure.ai
Healthcare
11-50
employees
2016
10 years old
Mumbai,Maharashtra
India
About
Qure.ai utilizes AI to improve radiology by automating image interpretation, aiming to enhance health outcomes and accessibility in healthcare.
Industries
Healthcare
Employees rate it well for
Work Culture9Senior Management8Work Life Balance6Learning4Office Politics4
Find them on