Senior Information Security Engineer at osttrahcm

Setup: Hybrid
Location: Gurgaon, Haryana
Type: Full-time
Level: not_specified
Posted: Aug 25, 2026

Description

OSTTRA is seeking a Senior Information Security Engineer to join their Governance, Risk, and Compliance (GRC) team. The role involves maintaining and improving the information security management framework, ensuring policy updates, driving ISO 27001 certification, and conducting core compliance operations such as user access reviews and security awareness programs. The ideal candidate will have 5-8 years of experience in an InfoSec GRC function.

Required Skills

ISO 27001 Expertise
Core GRC Competencies
Communication
Soft Skills

Additional Information

Required Previous Experiences: 5–8 years of direct experience within an InfoSec GRC function.
Hands-on experience managing an ISO 27001 ISMS, including active participation in both internal and external certification audits.
Direct experience executing user access reviews, phishing simulations, security training, and policy exception workflows.
Preferred Qualifications: Relevant industry certifications (e.g., ISO 27001 Internal/Lead Auditor, CISA, CRISC, Security+, or CISM).
Experience with the ISO 42001 AIMS standard.
Experience utilizing GRC automation platforms/tools.