information systems security officer

Altitude-Recruitment Limited

PermanentBased in Milton Keynes£50,000 pa - £60,000 paInformation Security Officer Hybrid Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.With over 25 years of experience and trusted by more than 350 institutions worldwide, their software empowers universities and venues to run smarter, faster, and more collaboratively. From bustling campuses to dynamic corporate environments, their technology adapts to the rhythm of each organisation - helping them thrive in a fast-changing world.They are more than just software. They are a team of passionate problem-solvers, innovators, and collaborators who care deeply about their customers and each other. Their culture is built on empowerment, community, and continuous growth. They believe in giving people the tools, support, and freedom to do their best work - and have fun while doing it.Joining our client means being part of a purpose-driven business where your ideas matter, your development is supported, and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities:Strategic (30%) <ul> <li>Define technical security architecture and standards across multi-cloud SaaS platforms </li><li>Embed security into product development lifecycle and roadmap planning </li><li>Conduct threat modelling and risk assessments for new features and system changes </li><li>Evaluate and recommend security technologies and tools </li></ul> Operational (40%) <ul> <li>Manage security environments across Azure and AWS infrastructure </li><li>Coordinate security incident response and vulnerability remediation </li><li>Oversee security monitoring, alerting, and detection capabilities </li><li>Manage vulnerability assessment and penetration testing programs </li><li>Maintain identity and access management controls </li></ul> Compliance & Assurance (30%) <ul> <li>Maintain ISO27001 certification and manage audit cycles </li><li>Ensure PCI/DSS compliance for payment processing systems </li><li>Manage GDPR compliance across all products and operations </li><li>Complete HECVAT and security questionnaires for higher education tenders </li><li>Support sales and customer success with security documentation and evidence </li><li>Act as primary security contact for customers and prospects </li></ul> Essential Requirements:<ul> <li>Substantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred) </li><li>Proven track record managing ISO27001 certification and compliance </li><li>Practical GDPR implementation experience in software products </li><li>PCI/DSS compliance experience with payment processing systems </li><li>Strong understanding of cloud security (Azure and/or AWS) </li><li>Application security and secure development lifecycle knowledge </li><li>Security incident management and cross-functional response coordination </li><li>Excellent communication skills - able to translate technical security for commercial and executive audiences </li><li>Experience supporting tender responses and client security assurance </li></ul> Preferred:<ul> <li>Professional certifications: CISSP, CISM, CISA, or equivalent </li><li>Higher education sector experience </li><li>Multi-tenant SaaS architecture security experience </li><li>DevSecOps and CI/CD security integration knowledge </li><li>Security frameworks: NIST, CIS Controls, OWASP </li><li>Multi-jurisdictional data protection knowledge </li><li>Enterprise sales cycle support experience </li></ul> Key Attributes:<ul> <li>Strategic thinker who can balance security with business needs </li><li>Pragmatic approach to security implementation </li><li>Detail-oriented with strong organisational skills </li><li>Collaborative and able to influence across teams </li><li>Proactive in identifying risks and improvement opportunities </li><li>Comfortable in fast-paced, dynamic environment </li></ul> Our client have created a welcoming office environment, with well-stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day. They are an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees. Please let us know if we need to make reasonable adjustments to our process, please let us know about how we can best support you and make the adjustments that may be needed. Altitude-Recruitment Limited acting as an Employment Agency and Employment Business.

Information Security Officer

Rolls Royce

Job Description Job Title: Contractor Program Security Officer (CPSO) Working Pattern: Fulltime - onsite (WFH every other Friday) Working location: Indianapolis, IN Rolls-Royce is in search of a multi-faceted security professional in support of multiple USG Defense programs. As the Contractor Program Security Officer (CPSO), you will act as the primary accountable person for our sensitive programs; however, you will work within a core team of CPSOs. Our other CPSO and Assistant CPSO will accompany you in attending meetings, routine engagements with the Program Management Office and more. Why Rolls-Royce? Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount. We are proud to be a force for progress, powering, protecting and connecting people everywhere. We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey. Rolls-Royce has been recognized as the top employer in the Engineering & Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive. At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference. Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics. What you will be doing: With this attractive opportunity you will be the gatekeeper for access, and the enforcer as it pertains to policies, compliance, and maintenance of program under our purview. The candidate will ultimately report to the Facility Security Officer (FSO). Key Responsibilities: <ul><li>Assist the Facility Security Officer (FSO): Specifically in the enforcement of policies and procedures to ensure that national security, sensitive information, intellectual property, and company personnel & assets are safeguarded in accordance with: DoD Manual 5205.07; 32 CFR Part 117 (NISPOM); ICD 705; and any other relevant guidance manuals or Security Directives. </li><li>Supports the Information Systems Security Managers (ISSMs) and Information Systems Security Officers (ISSOs) as it pertains to accountable items such as media and transfers, through document control measures. </li><li>Prepare and review administrative documentation, program access request forms, visitor control, and resolve program-related security issues. </li><li>Administer indoctrinations, program specific training, and debriefs. </li><li>Conduct investigations, security reviews, annual security trainings. </li><li>Complete annual self-inspections. </li><li>Oversees physical security requirements to ICD-705 standards; as well as provide input/oversight to any facility maintenance and upgrades. </li><li>Reviews all contractual requirements in DD Form 254s to extract security obligations; ensuring leadership remains cognizant of security-related concerns, in regard to new and existing programs. </li><li>Develop, implement, and enforce security plans, Standard Operating Procedures (SOPs), and policies specific to each program. </li></ul> Who we're looking for: At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles Basic Requirements: <ul><li>Must have or be able to obtain a US DoD Top Secret Security Clearance. Must be US Citizen. </li><li>Bachelor's degree with 5+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>A Master s degree with 3+ years of corporate security, government security, regulatory compliance, and /or risk management experience. OR; </li><li>A JD/PhD with 0 years experience OR; </li><li>In lieu of degree, 9+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>Experience with security systems such as DISS, JADE, CORE and Savannah. </li><li>Excellent organizational and project management skills. </li><li>Strong communication and interpersonal skills. </li></ul> Preferred Requirements: <ul><li>Prior security program management experience. </li><li>Extensive SAP / industrial security experience </li><li>Experience working on multiple projects simultaneously with critical deadlines. </li><li>Extensive experience in security education (in-brief/out-brief), and training newly accessed personnel across a diverse work environment. </li></ul> What we offer: We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts. Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home, or another remote location. It's a locally managed and flexed informal discretionary arrangement. As a minimum we're all expected to attend the workplace for collaboration and other specific reasons, on average three days per week. Job Category Security and Resilience Job Posting Date 22 Oct 2025; 00:10 Pay Range $99,987 -$162,479-Annually Location: Indianapolis, IN Benefits Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements. PandoLogic. Category:Technology,

Contractor Program Security Officer (CPSO)

Raytheon

<div>Date Posted:
2025-11-10
Country:
United States of America
Location:
CA220: 2202 E El Segundo Blvd BldgE02 2002 East El Segundo Boulevard Building E02, El Segundo, CA, 90245 USA
Position Role Type:
Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance:
DoD Clearance: Secret
RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses &ndash; Collins Aerospace Systems, Pratt &amp; Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.
The following position is to join our RTX Corporate team:
The ISSO assists the Information System Security Manager (ISSM) to provide oversight for the information systems security control methods, mitigations, and tools throughout a systems&rsquo; lifecycle in compliance with U.S. Department of Defense (DoD) security laws, regulations and guidelines. The ISSO will participate in projects, guide and counsel internal customers, assist in developing and maintaining program/dataset specific processes and standards, and provide training and guidance on tools and methods to other members of the cybersecurity team.
What You Will Do<ul><li>
The ISSO is primarily responsible for system compliance, auditing and delivering information systems security education and awareness.</li><li>
The ISSO will assist in investigating information system security violations and help prepare reports specifying corrective and preventative actions.</li><li>
Perform security sustainment activities (hardware change management, software change management, account management, media protection, user interface, file transfers, etc.).</li><li>
Assists in overseeing and managing the patch management process and execution across enterprise networks. Verifying the implementation of delegated aspects of the system security program.</li><li>
Ensuring audit records are collected and analyzed in accordance with the security plan.</li><li>
Individuals will develop, update, and/or review Risk Management Framework (RMF) documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&amp;M), Risk Assessment Report (RAR), as assigned by the ISSM.</li><li>
Collaborates with CDS and peer BU ISSMs/ISSOs for alignment and sharing of best practices.</li></ul>
Qualifications You Must Have<ul><li>
Bachelor&rsquo;s Degree with 5 years of relevant experience managing and implementing security program requirements in a classified environment, or an advanced degree with 3 years of relevant experience working in a classified environment.</li><li>
Compliance-based auditing using the RMF, Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM), or National Industrial Security Program Operating Manual (NISPOM).</li><li>
Certifications equivalent to or exceeding DoD 8570.01-M IAM Level I functional and baseline certification requirements.</li><li>
Knowledge and/or experience with STIGs, SCAP, Splunk, Tenable or other system hardening and compliance, vulnerability assessment, network security and/or SIEM tools.</li><li>
Must posses a DoD Secret Security clearance</li></ul>
Qualifications We Prefer<ul><li>
Experience working in DoD classified operating environments and/or in the execution of the Assessment &amp; Authorization processes, as defined within the Risk Managed Framework (RMF), NIST 800-53- Rev 4</li><li>
Experience with Scaled Agile Framework (SAFe) work practices.</li><li>
Experience with large multi-facility networks including various and complex components.</li><li>
Excellent oral and written communication skills with attention to detail and ability to multitask.</li><li>
Ability to adapt to rapidly changing environment and work under pressure to meet project deadlines.</li></ul>
What We Offer: Whether you&rsquo;re just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave, flexible work schedules, achievement awards, educational assistance and child/adult backup care.
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 90,000 USD - 182,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms</div>

eWAN Information System Security Officer (ISSO) Onsite

KAUST (King Abdullah University of Science and Technology)

<div>
 
 
 About the Role
 
 
 
 
 
 
 The Information System Security Principal (ISSP) is responsible for ensuring the overall security and compliance of the organization&rsquo;s supercomputer environment. The ISSP provides leadership and assurance by owning and executing the System Security Plan (SSP), coordinating implementation of required controls, overseeing risk and incident management, and serving as the key liaison between technical teams, cybersecurity, export control, legal, and governance committees. This role requires a senior-level professional with deep expertise in security architecture, Zero Trust principles, and governance frameworks, able to influence cross-functional teams without direct authority. The ISSP does not have direct reports but serves as the system-level security authority, leading by influence and collaborating across IT, cybersecurity, operations, legal, and compliance teams. The role provides executive-level visibility into risks and ensures that the supercomputer remains secure, compliant, and aligned with mission and research objectives to maintain the system's authorization to operate certificate.
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 <ul>
 <li>
 Lead the continuous development updates, ownership, and maintenance of the System Security Plan (SSP) for the supercomputing environment, ensuring it accurately reflects the system&rsquo;s architecture, controls, and operating context.
 </li>
 <li>
 Coordinate with IT infrastructure, cybersecurity, HPC administrators, and research program teams to ensure all required security controls in the SSP are implemented, validated, and continuously monitored.
 </li>
 <li>
 Translate regulatory, compliance, and security requirements into clear control ownership assignments across technical and non-technical teams.
 </li>
 <li>
 Track, validate, and report on evidence of control implementation provided by system owners, administrators, and support teams.
 </li>
 <li>
 Manage and maintain Plan of Action and Milestones (POA&amp;Ms), ensuring that gaps identified during audits, assessments, or incidents are remediated on time.
 </li>
 <li>
 Facilitate regular reviews and updates of the SSP to reflect changes in system design, architecture, users, or regulatory requirements.
 </li>
 <li>
 Act as the single point of accountability for ensuring the SSP remains audit-ready, accurate, and aligned with the operational reality of the supercomputer.
 </li>
 <li>
 Drive SSP execution across teams by coordinating activities such as vulnerability management, access control enforcement, logging/monitoring, and patch management, ensuring they are consistent with SSP control requirements.
 </li>
 <li>
 Provide training and guidance to system owners and administrators on their responsibilities related to SSP controls.
 </li>
 <li>
 Ensure executive-level visibility by reporting SSP status, risks, and gaps to the Supercomputer Security Steering Committee, Legal, and Compliance functions.
 </li>
 <li>
 Serve as the liaison to auditors, assessors, and authorizing officials, representing the supercomputer&rsquo;s security posture and SSP implementation progress.
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience).
 </li>
 <li>
 Preferred: Master&rsquo;s degree in Cybersecurity, Information Assurance, or related field.
 </li>
 <li>
 Professional certifications such as: CISSP, CISM, CCSP, CAP, GDSA, GCCC.
 </li>
 <li>
 Zero Trust&ndash;related certifications (e.g., NIST ZTA training, Microsoft SC-100, vendor-specific ZTNA certifications).
 </li>
 </ul>
 
 
 
 
 
 Required Skills
 
 
 
 
 
 <ul>
 <li>
 Well-rounded senior security expert with both architectural and assurance expertise.
 </li>
 <li>
 Influential communicator who can bridge technical, compliance, and legal perspectives.
 </li>
 <li>
 Calm under pressure, especially in high-visibility incident situations.
 </li>
 <li>
 Forward-looking, with the ability to integrate Zero Trust and modern security approaches into HPC environments.
 </li>
 <li>
 Strategic problem-solver who balances security, performance, and mission-critical research needs.
 </li>
 <li>
 SSP Program Management: Skilled at managing the end-to-end lifecycle of the System Security Plan, ensuring accuracy, execution, and accountability across multiple teams.
 </li>
 <li>
 Control Assurance: Ability to track, validate, and report on implementation of security controls, including evidence collection and POA&amp;M management.
 </li>
 <li>
 Cross-Team Coordination: Effective at driving accountability across IT, HPC, cybersecurity, research, legal, and compliance teams without direct authority.
 </li>
 <li>
 Security Architecture Expertise: Strong knowledge of Zero Trust Architecture, encryption, network segmentation, and identity/access management.
 </li>
 <li>
 Governance and Compliance Knowledge: Deep understanding of NIST SP 800-53, NIST RMF, ISO 27001, FISMA/FedRAMP, and export control requirements.
 </li>
 <li>
 Technical Competence in HPC: Familiarity with Linux/Unix and Windows environments, HPC architecture, and research computing infrastructures.
 </li>
 <li>
 Risk and Incident Management: Skilled in risk assessment, incident response coordination, and integrating lessons learned into continuous monitoring.
 </li>
 <li>
 Executive Communication: Ability to provide clear, concise updates and recommendations to steering committees, auditors, and authorizing officials.
 </li>
 </ul>
</div>

Information System Security Principal

CITY OF TOPEKA

<div>The City of Topeka is seeking an experienced Chief Security Officer (CSO) to lead and coordinate all aspects of physical and cybersecurity across the organization. The CSO will develop and implement comprehensive strategies and lead investigations to protect the City&rsquo;s information systems, infrastructure and data and ensure compliance with state, federal and local regulations.
What you'll do:
<ul><li>Develop and implement a unified security program aligned with the City&rsquo;s goals and regulatory standards.
</li><li>Collaborate with the City Manager and/or executive team to assess security posture and prioritize high-impact initiatives.
</li><li>Lead risk assessments, threat intelligence, and vulnerability management.
</li><li>Oversee incident response, crisis management, investigations, business continuity, and disaster recovery.
</li></ul>The ideal candidate:
<ul><li>Has an expert understanding of cybersecurity principles, municipal governance, and regulatory compliance (CJIS, HIPAA, NIST, etc.).</li>
<li>Is highly organized with the ability to manage multiple projects and deadlines.</li>
<li>Has excellent leadership, communication and crisis management skills.
</li><li>Is a critical thinker, with the ability to analyze information, solve complex problems, and make sound decisions.
</li></ul>Minimum Qualifications:
<ul><li>Bachelor&rsquo;s degree in Security Management, IT, Safety Management, Criminal Justice, or a related field is required with at least five years of experience in security administration and overseeing both physical and information security. OR
<ul><li>A high school diploma or its equivalent is required with nine years of experience in security administration and overseeing both physical and information security.
</li></ul></li><li>Relevant certification in IT management, such as Certified Information Systems Security Professional (CISSP), Certified Chief Information Security Officer (CCISO), and/or Certified Information Security Manager (CISM) preferred.</li>
</ul>
Annual Entry Salary: Up to $130,000 DOQ 
 
Click here to view the full position description (please right-click and open in new tab)
The City of Topeka offers a competitive compensation and benefits package, including:
<ul><li>Health/Dental Insurance</li>
<li>Paid Life/Long Term Disability Insurance</li>
<li>Generous Paid Vacation &amp; Holidays</li>
<li>KPERS 401(a) Retirement Plan</li>
<li>(457) Deferred Comp Savings Plan</li>
<li>Short-Term Disability Insurance</li>
<li>Free Onsite Health &amp; Wellness Clinic</li>
<li>Full-service fitness facility</li>
<li>Free Parking</li>
<li>Employee Assistance Program</li>
</ul>
The City of Topeka is an Equal Opportunity Employer</div>

Chief Security Officer (CSO)

SuperNova Solutions Pvt. Ltd.

Position Title: GRC Officer / SpecialistWe are seeking a proactive and detail-oriented GRC Officer / Analyst / Specialist to join our Governance, Risk &amp; Compliance (GRC) team. The ideal candidate will play a key role in ensuring that our SAP systems, processes, and IT operations comply with international governance, security, and risk management standards.Key Responsibilities:<ul><li>Conduct IT and SAP-related risk assessments, ensuring alignment with corporate governance frameworks</li></ul><ul><li>Support SAP GRC module configuration and compliance monitoring activities</li></ul><ul><li>Maintain and update ISO 27001, SOC 2, and SAP security compliance documentation</li></ul><ul><li>Monitor risk registers and ensure adherence to IT security and data protection policies</li></ul><ul><li>Participate in internal audits, SAP access reviews, and client compliance assessments</li></ul><ul><li>Prepare audit evidence, compliance reports, and risk documentation related to SAP environments</li></ul><ul><li>Collaborate with cross-functional teams (Basis, Security, and Functional Consultants) to ensure SAP compliance</li></ul>Required Skills &amp; Qualification:* Education: Bachelor&rsquo;s degree in Computer Science, Information Systems, or Business Administration* Experience: 2&ndash;4 years in IT compliance, audit, or risk management (experience with SAP systems or GRC tools preferred)* Strong understanding of ISO 27001, SOC 2, GDPR, or NIST frameworks* Familiarity with SAP GRC Access Control, Process Control, or Risk Management modules is a plus* Excellent communication, documentation, and analytical skills* Certifications such as SAP GRC, ISO 27001 Lead Implementer, or CISA are advantageousLocation: KarachiTo apply: careers@global-supernova.comSubject Line: GRC Officer / Specialist &ndash; KarachiJob Type: Full-timePay: Rs100,000.00 - Rs180,000.00 per monthWork Location: In person

GRC Officer / Specialist

DBS Bank

Job Summary: The Cybersecurity Regulatory and Compliance Officer is responsible for ensuring the organization’s cybersecurity practices comply with applicable laws, regulations, frameworks, and internal policies. This role bridges the gap between cybersecurity operations and legal/regulatory obligations, ensuring the organization maintains a robust, compliant security posture in a rapidly evolving threat and regulatory landscape.Requirements* Monitor cybersecurity regulationsand frameworks (e.g., NIST, ISO 27001, DPDP, PCI-DSS, CIS controls) relevant to the organization’s operations and industry.* Translate regulatory cybersecurity requirements into actionable internal controls and risk mitigation strategies.* Collaborate with IT, security, audit, and business teams to develop and enforce cybersecurity policies and procedures.* Conduct regular assessments, audits, and gap analyses to ensure compliance with cybersecurity standards and best practices.* Support preparation and response for internal audits, external audits, assessments, and certification efforts (e.g., ISO 27001, PCI-DSS).* Track regulatory changes and provide timely updates to stakeholders, ensuring policies and controls remain current.* Manage cybersecurity risk registers and contribute to enterprise risk management initiatives.* Oversee cybersecurity incident reporting and ensure compliance with breach notification laws.* Prepare and submit cybersecurity-related regulatory filings, documentation, and reports.* Deliver internal training and awareness on cybersecurity compliance requirements and secure practices.Qualifications: * Bachelor’s degree in Cybersecurity, Information Technology, or a related field (Master’s preferred).* 7-10 years of experience in cybersecurity, regulatory compliance, risk management, or related field.* Strong understanding of regulations and compliance (e.g., RBI Cybersecurity Framework, SEBI CSCRF, NIST CSF, ISO/IEC 27001, PCI-DSS, etc.).* Relevant certifications preferred: * Compliance-focused: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Privacy Professional (CIPP).* Cybersecurity-focused: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM).* Experience supporting security and compliance audits and working with regulatory bodies or external assessors.* Strong analytical, organizational, and communication skills.Preferred Experience: * Hands-on experience working in regulated industries (e.g., NBFC and Bank ).* Experience in incident response planning and regulatory breach reporting.

Senior Associate, Cybersecurity Regulatory and Compliance Officer, Technology and Operations

Search 10000+ Information systems security officer jobs near you this November. New roles added regularly across leading industries. Apply today.