Information Security Governance Associate

Company Description

ISECURION is a trusted cybersecurity consulting company, CERT-In Empanelled and ISO 27001:2022 Certified, dedicated to strengthening organizational security in a complex digital landscape. Offering services such as Vulnerability Assessment & Penetration Testing (VAPT), compliance audits, cloud security, DFIR, risk assessments, and managed security services, we help identify gaps, mitigate risks, and enhance security maturity. Our practical and business-focused approach ensures vulnerabilities are understood, prioritized, and resolved in alignment with industry standards. Powered by a passionate team, ISECURION is committed to innovation and delivering meaningful security outcomes for our clients.

Experience: 6 Months 1 Year

Certification: ISO 27001 Lead Implementer (Mandatory)

Location: Bengaluru , Karnataka , India

Department: Information Security / GRC

Role Overview

We are seeking a motivated and detail-oriented Information Security Governance Associate to work closely with the Virtual Chief Information Security Officer (vCISO) in supporting governance, risk, and compliance activities for our clients. The ideal candidate should have hands-on knowledge of ISO 27001, Information Security Management Systems (ISMS), and SOC 2 Type II compliance frameworks.

This role offers an excellent opportunity to gain exposure to information security governance, compliance management, risk assessment, policy development, and audit support activities across multiple client environments.

Key Responsibilities

Assist the vCISO in implementing and maintaining Information Security Management Systems (ISMS) aligned with ISO 27001 requirements.

Support ISO 27001 implementation, monitoring, internal audits, and compliance activities.

Participate in risk assessments, risk treatment planning, and risk register maintenance.

Assist in the development, review, and maintenance of information security policies, procedures, standards, and guidelines.

Support SOC 2 Type II readiness assessments, evidence collection, and audit coordination.

Monitor compliance requirements and track remediation activities.

Conduct periodic reviews of security controls and compliance documentation.

Assist in preparing management reports, compliance dashboards, and governance metrics.

Coordinate with client stakeholders for audit evidence collection and compliance activities.

Support awareness and compliance initiatives related to information security governance.

Maintain documentation related to ISMS, audits, risk management, and compliance activities.

Required Skills & Qualifications

6 months to 1 year of experience in Information Security, Governance, Risk & Compliance (GRC), or related domains.

ISO 27001 Lead Implementer certification is mandatory.

Good understanding of ISO/IEC 27001 standards and ISMS implementation.

Familiarity with SOC 2 Type II requirements and control frameworks.

Knowledge of risk assessment methodologies and security governance practices.

Strong documentation and report-writing skills.

Excellent communication and stakeholder coordination skills.

Proficiency in Microsoft Office tools, especially Excel, Word, and PowerPoint.

Ability to manage multiple tasks and work independently under guidance.

Preferred Qualifications

Exposure to internal audits or compliance assessments.

Understanding of information security controls and risk management concepts.

Familiarity with additional frameworks such as NIST, CIS Controls, or GDPR is an advantage.

What You'll Gain

Direct mentorship and exposure while working alongside a vCISO.

Hands-on experience in information security governance and compliance programs.

Opportunity to work with multiple clients across different industries.

Exposure to ISO 27001 implementation, SOC 2 audits, risk management, and security governance activities.