Maintains ISO 27001:2022 certifications and the Information Security Management System across multiple business scopes. Coordinates audits, risk assessments, control monitoring, evidence collection, corrective actions, compliance reporting, customer and vendor assurance, and stakeholder governance. Supports AI governance readiness aligned with ISO/IEC 42001 and related regulatory frameworks.
The Senior Information Security Governance Manager is responsible for maintaining Anthesis’ ISO 27001:2022 certifications across multiple business processes and ensuring the continued effectiveness of the Information Security Management System (ISMS).
The role provides governance, compliance, audit, and assurance support while contributing to customer trust, vendor assurance, and regulatory compliance initiatives. It coordinates certification activities, risk management, control monitoring, audit readiness, and compliance reporting, while supporting the future implementation of ISO/IEC 42001 and broader AI governance initiatives.
Key Responsibilities
- ISMS & Certification Management: Maintain and continuously improve the ISO 27001:2022 ISMS; coordinate Wallbrook, Digital, and MERO certification scopes; manage surveillance and recertification audits; maintain the Statement of Applicability, policies, standards, procedures, and evidence; track findings, corrective actions, observations, and non-conformities; and ensure ongoing audit readiness.
- Governance, Risk & Compliance: Facilitate information security risk assessments and treatment activities; monitor control effectiveness and compliance obligations; support internal control reviews and assurance activities; maintain metrics, dashboards, and reports; and improve security policies and standards.
- Client Assurance & Compliance Support: Support customer reviews, due diligence, vendor assurance, security assessments, and questionnaires; maintain evidence repositories and certification documentation; assist contract compliance reviews; and support customer and procurement requirements.
- Audit & Stakeholder Management: Coordinate internal and external auditors; work with control owners to obtain evidence and implement corrective actions; guide business and technology stakeholders; support management reviews and executive reporting; and promote security awareness and governance maturity.
- AI Governance Readiness: Support governance frameworks aligned with ISO/IEC 42001, including AI risk management, policy development, compliance activities, governance initiatives, and future certification readiness.
- Other duties as assigned by the manager.
Skills, Knowledge & Expertise
Competences and Skills
- Strong understanding of ISO 27001:2022 requirements and certification processes.
- Working knowledge of ISO/IEC 42001, NIST CSF, SOC 2, GDPR, and related frameworks.
- Experience managing audits, evidence collection, and corrective action programmes.
- Strong stakeholder management and communication skills.
- Ability to coordinate across Security, Legal, IT, Sales, and business functions.
- Excellent documentation, organisation, and reporting capabilities.
- Strong analytical and risk-based decision-making skills.
- Ability to work independently across multiple priorities and time zones.
Training and experience
- Bachelor’s degree in Information Security, Computer Science, Information Technology, Risk Management, Audit, or a related discipline.
- 8-10 years of experience in information security governance, compliance, ISMS management, audit, or risk management.
- Demonstrable experience supporting or maintaining ISO 27001 certification programmes, audits, compliance assessments, evidence management, and regulatory requirements.
- Professional proficiency in English.
Desirable
- ISO 27001 Lead Implementer or Lead Auditor certification; ISO/IEC 42001 or AI governance experience; customer, vendor, or third-party assurance experience; and certifications such as CISA, Security+, CRISC, or CISSP.
About
Our commitment to building and maintaining a diverse workforce Anthesis has clients across all industry sectors and supports some of the world’s largest multinationals such as Reckitt, Cisco, Tesco, The North Face, and Target. The company brings together 1,300+ experts operating across 22 countries and 44 office locations with offices in Australia, Belgium, Brazil, Canada, China, Colombia, Finland, France, Germany, Hong Kong, Ireland, Italy, the Middle East, Netherlands, the Philippines, Singapore, South Africa, Spain, Sweden, Switzerland, the UK, and the US. We encourage all employees to contribute their ideas, perspectives, and experiences to help us create an inclusive and equitable workplace. By embracing diversity and providing equal opportunities, we believe we can drive innovation, foster creativity, and achieve our shared goals. So, if you’re ready to be a part of something truly extraordinary, then we want you! Qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, pregnancy, marital status, protected veteran status, or disability status. Together, we can continue to build a diverse and inclusive workforce where everyone has an equal opportunity to succeed and thrive. If you require any reasonable adjustments to be made to your application process, or need this job advert in a different format, just let us know and we’ll be happy to help.
Similar Jobs
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Provides systems safety engineering for aircraft turbine engines and auxiliary power systems. Conducts hazard and safety analyses, develops safety requirements and documentation, supports FAA and EASA compliance, performs reliability analysis, and reviews designs. Collaborates across engineering teams on risk mitigation, corrective actions, and aftermarket safety metrics. The role also supports process standardization, automation, AI application, technical coaching, innovation, and strategies to reduce certification cycle time and cost.
Top Skills:
Artificial IntelligenceDoorsDoors NgModel-Based Systems Engineering
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Leads embedded software and firmware development for processor simulators and emulators, including requirements, architecture, design, coding, qualification, and technical support. Develops QEMU and KVM-based tools, ports Linux or RTOS to SoCs, and works with ARM architectures and low-level hardware interfaces. Owns simulator strategy, roadmaps, issue resolution, design decisions, stakeholder collaboration, process improvement, and team mentoring while driving innovation and competitive product development.
Top Skills:
ArmAssemblyBitbucketCC++Do-178B/CDo-330DoorsEclipseEthernetGdbGpioKvmLauterbachLinuxMpsocPciQemuRtosSocSvnTrace32Visual Studio
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Leads reactive and proactive incident response engagements across India and APAC. Performs advanced host and network forensics on Windows, macOS, and Linux; advises customers during security incidents; develops remediation plans; presents findings to technical and executive audiences; and mentors junior team members. The role also involves threat intelligence, adversary attribution, thought leadership, and applying AI technologies to improve workflows and decision-making.
Top Skills:
Artificial IntelligenceComputer Forensics ToolsLinuxmacOSNetwork Analysis ToolsNetwork ProtocolsWindows
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
