Mid information system security specialist

We are looking for a talented IT InfoSec & Technical Specialist to lead and strengthen our information security and IT operations while ensuring our systems remain secure, reliable, and compliant with ISO 27001 standards.

In this role, you will own end-to-end information systems security processes, from identifying and mitigating security vulnerabilities across our infrastructure to managing endpoint security, firewalls, antivirus solutions, patch management, intrusion detection, and data protection controls. You will also play a key role in implementing and maintaining organizational security policies, improving the reliability of our IT systems, supporting ISO 27001 compliance and recertification, and advising senior leadership on cybersecurity risks and best practices.

As a member of the IT team, you will combine hands-on technical expertise with strategic thinking, partnering with cross-functional teams to build a strong security-first culture across The Scalers.

ROLES AND RESPONSIBILITIES:

• Compliance Management: Drive, implement, and oversee enterprise IT compliance programs, ensuring strict adherence to ISO 27001:2022, ISO 9001, SOC 2, GDPR, and DPDPA requirements.
• Security Controls Implementation: Design, deploy, and maintain robust security controls aligned with regulatory frameworks and organizational objectives to protect company assets and data.
• Policy & Documentation: Lead the end-to-end lifecycle of security documentation. Draft, review, implement, and enforce IT security policies, procedures, and guidelines across the organization.
• Risk & Incident Management: Conduct comprehensive IT risk analyses, vulnerability assessments, and threat modeling. Oversee the incident management lifecycle, from detection and response to root cause analysis and mitigation.
• Audit & Evidence Management: Act as the primary point of contact for internal and external audits. Prepare, collect, manage, and present audit evidence to ensure continuous audit readiness and successful (re)certifications.
• IT Operations Integration: Leverage a foundational understanding of IT operations and infrastructure to evaluate the current IT security architecture, identify gaps, and drive structural improvements.
• Security Culture & Advisory: Advise senior leadership on cybersecurity and compliance strategies. Conduct security awareness sessions, phishing campaigns, and mentor cross-functional teams on data privacy best practices.

SKILLS AND COMPETENCIES:

• Experience: 3+ years of dedicated, hands-on experience in Information Security and IT Compliance (ISO, GDPR, SOC 2, etc.).
• Framework Expertise: Deep understanding and proven implementation experience with ISO 27001:2022, ISO 9001, SOC 2, GDPR, and DPDPA frameworks.
• GRC Capabilities: Strong command of policy preparation, risk assessment methodologies, incident response planning, and evidence management for stringent audits.
• Technical Foundation: Solid operational knowledge of IT infrastructure, networks, and systems administration to effectively bridge the gap between compliance requirements and technical execution.
• Communication: Excellent analytical, documentation, and presentation skills. Ability to translate complex regulatory and technical requirements into actionable steps for non-technical stakeholders.