Information Security Governance - Professional

Crisil is hiring a Information Security Governance - Professional in Mumbai, India. The details below summarise the employer's own listing; applications happen on the original posting, not on GetFirstJob.

What the work involves

• Responsible for managing and supporting Information Security Governance, Risk, and Compliance (GRC) activities to ensure adherence to applicable information security standards, regulatory
• ISO 27001:2022 Compliance and ISMS Management
• Manage and support the implementation, maintenance, and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022

What they are looking for

• , internal policies, and client commitments
• The role involves implementing and maintaining the Information Security Management System (ISMS), conducting risk assessments, coordinating internal and external audits, monitoring compliance, and driving continuous improvement across information security processes
• Coordinate internal and external certification and surveillance audits, including audit planning, evidence collection, stakeholder coordination, and closure of audit findings
• Review information security policies, standards, procedures, and control documentation to ensure alignment with ISO 27001:2022
• Track non-conformities, observations, corrective actions, and continual improvement initiatives
• Information Security Risk Assessments
• Conduct information security risk assessments to identify, evaluate, and document risks associated with business processes, information assets, systems, and third-party services
• Evaluate risks based on likelihood, impact, existing controls, and residual risk

Pay and dates

The listed pay is Not Disclosed. The source page shows a relative posting age rather than an exact posting date; this role was first seen and checked as open on 4 November 2026. The source page showed it as posted “1 day ago” when captured; that is a relative stamp, not an exact date.

How to apply

Apply on the listing where the employer published this role: Information Security Governance - Professional at Crisil. We found this listing via naukri.com; it was still open when we checked on 4 November 2026. If the posting has closed or the link fails, the role may have been filled.