Information Security & Compliance Lead

Information Security & Compliance Lead

Location: Gurugram

Experience: 3-5 Years

Employment Type: Full-time

About the Role

Infra360 is growing, and we’re looking for an Information Security & Compliance Lead to help build and strengthen our InfoSec & GRC practices.

This is a hands-on, high-ownership opportunity for someone who wants to take the next step in their career by working across Information Security, Compliance, Risk, and Governance.

You’ll work closely with Leadership, DevOps, Cloud, IT, and Security teams to build practical security processes, support compliance initiatives, and prepare the organization for certifications, audits, and customer security requirements.

What You’ll Work On

• •Build and improve Infra360’s Information Security & GRC processes.
• •Develop and maintain security policies, controls, and procedures.
• •Support ISO 27001 and SOC 2 readiness, audits, and compliance activities.
• •Conduct security risk assessments and track remediation.
• •Coordinate with internal teams and auditors for evidence, assessments, and audits.
• •Support customer security questionnaires, RFPs, and due diligence.
• •Help establish vendor and third-party security assessment processes.
• •Work with DevOps, Cloud and IT teams to strengthen and document security controls.
• •Support security awareness and compliance initiatives across the organization.
• •Help create simple, scalable processes as Infra360 continues to grow.

What We’re Looking For

• •3-5 years of experience in Information Security, GRC, Risk & Compliance.
• •Practical experience with ISO 27001 / ISMS and exposure to SOC 2 .
• •Understanding of security policies, controls, risk management, and audits.
• •Working knowledge of HIPAA, PCI DSS, GDPR or DPDP is a plus.
• •Basic technical understanding of Cloud, IAM, Endpoint Security, Vulnerability Management and Security Operations.
• •Good communication and stakeholder-management skills.
• •Strong ownership and documentation skills.
• •Someone who enjoys building processes, solving problems, and working in a fast-moving environment.

Good to Have

ISO 27001 Lead Implementer/Auditor, CISA, CISM, CISSP, CRISC or CCSP .

Why This Role?

An opportunity to build and shape Infra360’s InfoSec & GRC function , work closely with technical and leadership teams, and grow with a fast-scaling cloud and cybersecurity organization.