Information Security & Compliance Lead

Location: Gurugram, India

Department: Technology

Experience: 3-5 Years

Skills: Security Security Compliance, HIPAA, Information Security, SOC 2 (Type I & II), GDPR, ISO 27001 (ISMS), PCI DSS, GRC, NIST CSF, IAM policies

Information Security & Compliance Lead

About the Role

What You’ll Work On

• Build and improve Infra360’s Information Security & GRC processes.
• Develop and maintain security policies, controls, and procedures.
• Support ISO 27001 and SOC 2 readiness, audits, and compliance activities.
• Conduct security risk assessments and track remediation.
• Coordinate with internal teams and auditors for evidence, assessments, and audits.
• Support customer security questionnaires, RFPs, and due diligence.
• Help establish vendor and third-party security assessment processes.
• Work with DevOps, Cloud and IT teams to strengthen and document security controls.
• Support security awareness and compliance initiatives across the organization.
• Help create simple, scalable processes as Infra360 continues to grow.

What We’re Looking For

• 3-5 years of experience in Information Security, GRC, Risk & Compliance.
• Practical experience with ISO 27001 / ISMS and exposure to SOC 2.
• Understanding of security policies, controls, risk management, and audits.
• Working knowledge of HIPAA, PCI DSS, GDPR or DPDP is a plus.
• Basic technical understanding of Cloud, IAM, Endpoint Security, Vulnerability Management and Security Operations.
• Good communication and stakeholder-management skills.
• Strong ownership and documentation skills.
• Someone who enjoys building processes, solving problems, and working in a fast-moving environment.

Good to Have

Why This Role?