Information Security Consultant, Security, Policy & Compliance Officer

Broad Role / Responsibilities

• Develop, implement and monitor security policies and compliance frameworks aligned with government and industry regulations.
• Conduct security risk assessments, audits, and compliance reviews to identify gaps and recommend mitigation measures.
• Collaborate with IT and project teams to ensure security controls are embedded in system design and operations.
• Advise on data protection, privacy laws, cyber security measures, and incident response planning.
• Support regulatory reporting and audits for compliance with statutory and contractual obligations.
• Drive awareness and training programs on security policies and compliance standards among stakeholders.
• Liaise with external auditors, regulators, and internal stakeholders to address compliance issues.
• Track and report compliance metrics, incidents, and remediation status to leadership.
• Assist in contract and vendor reviews to ensure adherence to security and compliance requirements.
• Promote a culture of security awareness and ethical conduct within the organization.

Broad Experience & Expertise Requirements

• Minimum 8 years of experience in IT security, data protection, legal/policy compliance or regulatory frameworks for Government IT projects.
• Familiarity with government compliance frameworks, IT security standards (e.g., ISO 27001), and regulatory environments.
• Experience with security audits, risk management processes, and governance frameworks.
• Knowledge of data privacy regulations and cyber security best practices.
• Experience in managing security and compliance for technology or infrastructure projects preferred.

Educational Qualifications (essential)

• B.E./B.Tech in CS/IT / Cyber Security / Law / Public Policy

Certification

• Any relevant certification will be an added advantage.

Personality traits (a must)

• Strong analytical and investigative skills.
• Effective communication and stakeholder management abilities.
• Attention to detail and a proactive approach to risk mitigation.
• Ability to navigate complex regulatory environments and drive compliance.
• Ethical, trustworthy, and committed to continuous learning.
• Collaborative team player with good leadership qualities.