ISO Implementation Lead Consultant
Cybercommand Tech · Hyderabad · onsite · Posted 1d ago
Undisclosed7–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Title
Job Summary
Key Responsibilities
Education Qualification
Job Type
Location
Duration
Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
ISO Implementation Lead Consultant
Job Summary
As an ISO 27001 Implementation Lead Consultant at CyberCommand, your primary responsibility will be to lead and coordinate the implementation, operationalization, and certification readiness of an existing Information Security Management System (ISMS). You will work with client stakeholders to validate existing documentation, identify and prioritize implementation gaps, coordinate security control implementation, and establish the evidence required for successful certification.
The ideal candidate should have strong project management and stakeholder coordination skills, with the ability to drive ISO 27001 implementation across multiple business functions and sites while building on existing processes and documentation.
Key Responsibilities
- 7 10 years of experience in ISO 27001 implementation, ISMS operationalization, and certification readiness.
- Strong understanding of ISO/IEC 27001:2022 requirements, Annex A controls, information security risk assessments, and risk treatment.
- Hands-on experience preparing and maintaining the Statement of Applicability (SoA), risk registers, policies, procedures, and audit evidence.
- Proven experience coordinating internal audits, management reviews, corrective actions, and Stage 1 and Stage 2 certification audits.
- Experience working with cross-functional teams, including IT, cybersecurity, infrastructure, manufacturing, ERP, procurement, and business operations.
- Knowledge of TISAX, IT General Controls (ITGC), SOX, supplier security, asset management, and physical security will be an advantage.
- ISO 27001 Lead Implementer certification is preferred. Lead Auditor certification is an added advantage.
- Review the existing ISO 27001 implementation plan, define workstreams, establish milestones, assign responsibilities, and track progress against agreed timelines.
- Conduct gap assessments against ISO 27001:2022 requirements and applicable Annex A controls, leveraging existing TISAX assessments and evidence wherever possible.
- Maintain a consolidated gap assessment and remediation tracker, including risk priorities, accountable owners, target dates, closure criteria, and verification evidence.
- Review and operationalize the existing information security risk assessment methodology, risk register, risk treatment plan, and Statement of Applicability (SoA).
- Review and improve existing information security policies, procedures, standards, and documentation rather than recreating documents unnecessarily.
- Coordinate security control implementation across IT infrastructure, cybersecurity, identity and access management, ERP, plant systems, vendors, physical security, mobile IT, and business processes.
- Prioritize asset inventory and CMDB ownership, access governance, third-party security, physical protection, and repeatable evidence collection.
- Coordinate ISO 27001 awareness and training, internal audits, management reviews, corrective actions, and verification of control effectiveness.
- Integrate relevant evidence from TISAX, ITGC, SOX, IATF, penetration testing, resilience activities, and other applicable assurance programs.
- Coordinate certification-body selection, readiness reviews, Stage 1 and Stage 2 certification audits, auditor requests, stakeholder interviews, and corrective-action closure.
- Collaborate with IT, cybersecurity, Facilities, HR, Privacy, Legal, Procurement, manufacturing, and business teams to ensure effective implementation and clear ownership of security controls.
- Prepare regular implementation status reports covering milestones, risks, outstanding gaps, dependencies, and decisions required from management
Education Qualification
Btech or Mtech in computer science or realted fields
Job Type
Contract
Location
Remote, India
Duration
6-12+ Months
Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
IatfAsset ManagementIso 27001CMDBISO Implementationauditsidentity and access managementISMSERPCyber SecurityPenetration TestingManufacturingInformation SecurityoperationsLegalIT InfrastructureBusiness Operations