Consultant, Cyber Program Design and Governance-ISO Security Cloud& AI- Hyderabad

The Senior ISO Governance, Risk, and Compliance Analyst is responsible for supporting and strengthening the organization’s Information Security Management System (ISMS), with primary alignment to ISO/IEC 27001:2022 and related ISO standards for cloud security, cloud privacy, and artificial intelligence governance.

This senior analyst role leads day-to-day ISO compliance activities, including ISMS documentation, risk assessment coordination, control testing, evidence management, audit readiness, corrective action tracking, and continuous improvement of ISO-aligned security processes.

The role works closely with IT, Security Operations, Privacy, Legal, Risk, and Business teams to ensure information security roles, responsibilities, controls, and evidence are clearly defined, maintained, and audit-ready.

Work you'll do

As an ISO Security Cloud& AI on the Member firm team, you will be responsible for:

Maintain and improve ISO/IEC 27001:2022-aligned ISMS policies, standards, procedures, control documentation, and governance records

Coordinate information security risk assessments, maintain risk registers, and track treatment plans, risk owners, due dates, and acceptance records

Support ISO certification, surveillance, internal audit, and external audit activities through evidence collection, control walkthroughs, self-assessments, and remediation tracking

Support cloud security, cloud privacy, and artificial intelligence governance activities aligned to ISO/IEC 27017, ISO/IEC 27018, and ISO/IEC 42001

Develop dashboards, management review materials, and process improvements to strengthen audit readiness, control monitoring, and continual ISMS improvement

The team

This team helps protect the organization’s information assets through governance, risk, and compliance practices that support secure business operations. The team works closely with technology, privacy, legal, risk, and business stakeholders to maintain security standards, manage risk, and improve audit readiness. It also helps translate security and compliance requirements into practical controls across enterprise, cloud, and AI-enabled environments.

Location: Hyderabad

Shift Timings: 2 PM to 11 PM IST

Required:

4-6 years of experience in information security governance, risk, and compliance, information security management systems, or information technology audit

Experience supporting an information security management system aligned to ISO/IEC 27001

Experience coordinating risk assessments, maintaining risk registers, and tracking corrective actions or treatment plans

Experience supporting certification audits, surveillance audits, internal audits, or external audits

Experience maintaining control documentation, evidence repositories, or document control records

Experience with ServiceNow Governance, Risk, and Compliance, Archer, OneTrust, or equivalent governance, risk, and compliance tools

Preferred:

Experience supporting cloud security governance aligned to ISO/IEC 27017

Experience supporting cloud privacy reviews aligned to ISO/IEC 27018

Experience supporting artificial intelligence governance activities aligned to ISO/IEC 42001

Experience developing dashboards, key risk indicators, or management review reporting

ISO/IEC 27001 Lead Implementer, Lead Auditor, or Internal Auditor certification