Infosec

Role Overview

We are looking for a detail-oriented professional to manage Information Security, Compliance, Office Administration, and Asset Management. The role will support ISO 27001, PIMS, and SOC 2 compliance while ensuring smooth office operations and IT asset governance.

Key ResponsibilitiesInformation Security & Compliance

• Manage and maintain ISO 27001 ISMS, PIMS, and SOC 2 compliance.
• Conduct risk assessments, internal audits, and compliance reviews.
• Coordinate certification and external audits.
• Drive security awareness and employee training programs.
• Support incident response and corrective action management.
• Perform vendor security assessments and Third-Party Risk Management (TPRM).
• Ensure adherence to OWASP and secure SDLC practices.
  
  

• Manage day-to-day office administration and facility operations.
• Coordinate vendors for housekeeping, internet, maintenance, and office services.
• Handle procurement, inventory, stationery, pantry, and office supplies.
• Maintain company assets including laptops, accessories, ID cards, and office equipment.
• Support employee onboarding and offboarding through asset allocation and recovery.
• Track asset inventory, invoices, vendor agreements, and related documentation.
  
  

• 2–5 years of experience in Information Security, Compliance, IT Administration, or Office Operations.
• Hands-on experience with ISO 27001, SOC 2, and internal audits.
• Exposure to asset management, vendor management, and office administration.
  
  

• Strong understanding of Information Security, GRC, and compliance frameworks.
• Excellent communication, stakeholder management, and organizational skills.
• ISO 27001 Lead Auditor (LA) or Lead Implementer (LI) certification preferred.
• CISSP, CISM, or CISA certifications are a plus.