The ISMS Senior Associate is responsible for implementing, maintaining, and enhancing Information Security Management Systems (ISMS) aligned with ISO/IEC 27001 and related standards. This role supports and leads client engagements, assesses compliance posture, and delivers strategic and technical security recommendations to strengthen information security and risk management practices.

Responsibilities

• Implement and maintain ISO/IEC 27001-based ISMS frameworks

• Conduct information security risk assessments and gap analyses

• Support internal audits and compliance reviews

• Assess client security posture against industry standards and regulatory requirements

• Develop and recommend security controls, policies, and remediation plans

• Provide advisory support on security frameworks (e.g., NIST, PCI DSS, GDPR, HIPAA)

• Collaborate with stakeholders to drive continuous improvement in security governance

Qualifications