Information Security & Compliance Lead
Infra360 Solutions
Gurugram, HR, IndiaPosted Discovered via the company's careers siteMatch locked
full time3+ years expTechnology
Location
Gurugram
Experience
3-5 Years
Employment Type
Full-time
About the Role
Infra360 is growing, and we're looking for an
Information Security & Compliance Lead
to help build and strengthen our InfoSec & GRC practices.
This is a
hands-on, high-ownership opportunity
for someone who wants to take the next step in their career by working across Information Security, Compliance, Risk, and Governance.
You'll work closely with
Leadership, DevOps, Cloud, IT, and Security teams
to build practical security processes, support compliance initiatives, and prepare the organization for certifications, audits, and customer security requirements.
What You’ll Work On
- Build and improve Infra360's Information Security & GRC processes.
- Develop and maintain security policies, controls, and procedures.
- Support ISO 27001 and SOC 2 readiness, audits, and compliance activities.
- Conduct security risk assessments and track remediation.
- Coordinate with internal teams and auditors for evidence, assessments, and audits.
- Support customer security questionnaires, RFPs, and due diligence.
- Help establish vendor and third-party security assessment processes.
- Work with DevOps, Cloud and IT teams to strengthen and document security controls.
- Support security awareness and compliance initiatives across the organization.
- Help create simple, scalable processes as Infra360 continues to grow.
What We’re Looking For
•
3-5 years
of experience in Information Security, GRC, Risk & Compliance.
- Practical experience with
ISO 27001 / ISMS
and exposure to
SOC 2
.
- Understanding of security policies, controls, risk management, and audits.
- Working knowledge of HIPAA, PCI DSS, GDPR or DPDP is a plus.
- Basic technical understanding of Cloud, IAM, Endpoint Security, Vulnerability Management and Security Operations.
- Good communication and stakeholder-management skills.
- Strong ownership and documentation skills.
- Someone who enjoys building processes, solving problems, and working in a fast-moving environment.
Good to Have
ISO 27001 Lead Implementer/Auditor,
CISA, CISM, CISSP, CRISC or CCSP
.
Why This Role?
An opportunity to
build and shape Infra360’s InfoSec & GRC function
, work closely with technical and leadership teams, and grow with a fast-scaling cloud and cybersecurity organization.
Not included in the source posting: benefits.
Skills
cybersecuritysoccisspdevopsiam
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.