Assistant Manager/Manager - Security Compliance

About Organization: Larsen & Toubro Ltd, commonly known as L&T, is an Indian multinational conglomerate company, with business interests in engineering, construction, manufacturing, technology, information technology and financial services, headquartered in Mumbai. The company is counted among world's top five construction companies. The L&T Group comprises of 93 subsidiaries, 5 associate companies, 27 joint ventures and 35 jointly held operations, operating across basic and heavy engineering, construction, realty, manufacturing of capital goods, information technology, and financial services. Industry Specialties: Aerospace, Infrastructure, Shipbuilding, Construction, Defense, Finance, Forging, Hydrocarbon, Information Technology & Engineering Services, Construction Equipment, Railways, Boilers, Process Plant, Turbines, Power, Renewable Energy, Manufacturing, and Green Hydrogen. This role is based out of Corporate IT in Headoffice: Job Location: Powai, Mumbai Working Model: Work from office Operating Model: 6 days (2nd and 4th Saturdays Off) EDUCATIONAL QUALIFICATIONS: B.Tech/B.E./MCA/M.Sc. In Cyber Security Specialization, ISO 27001 Lead Auditor certified preferred. EXPERIENCE: Min. 3-5 years in Information security compliance Job Profile: Sound knowledge of Info Sec standards such as ISO27001 Basic understanding of following security technologies (EDR, DLP, PIM, IRM, SIEM, SOC etc) Should have performed internal audits for standards & frameworks such as ISO27001, DPDP act, etc Knowledge of Risk Frameworks Job Responsibilites Perform Cyber Assurance assessments within L&T group of companies Keep track of control remediations across companies & guide on process & technology controls Operationalize & Run GRC program Explore automation opportunities in audit & GRC areas Evaluate & run proof of concept for GRC technologies Maintain oversight on current & emerging threat landscape. Accordingly update cyber assurance framework As ISMS manager, run ISO27001 program for corporate Good communication skills (verbal/written) Should be a self-starter, motivated COMPENTENCIES Security certifications (CISA, CISSP, CISM), ISO27001 lead auditor desirable