Role Overview
We are looking for a detail-oriented professional to manage Information Security, Compliance, Office Administration, and Asset Management. The role will support ISO 27001, PIMS, and SOC 2 compliance while ensuring smooth office operations and IT asset governance.
Key ResponsibilitiesInformation Security & Compliance
- Manage and maintain ISO 27001 ISMS, PIMS, and SOC 2 compliance.
- Conduct risk assessments, internal audits, and compliance reviews.
- Coordinate certification and external audits.
- Drive security awareness and employee training programs.
- Support incident response and corrective action management.
- Perform vendor security assessments and Third-Party Risk Management (TPRM).
- Ensure adherence to OWASP and secure SDLC practices.
Office Administration & Asset Management
- Manage day-to-day office administration and facility operations.
- Coordinate vendors for housekeeping, internet, maintenance, and office services.
- Handle procurement, inventory, stationery, pantry, and office supplies.
- Maintain company assets including laptops, accessories, ID cards, and office equipment.
- Support employee onboarding and offboarding through asset allocation and recovery.
- Track asset inventory, invoices, vendor agreements, and related documentation.
Experience
- 2–5 years of experience in Information Security, Compliance, IT Administration, or Office Operations.
- Hands-on experience with ISO 27001, SOC 2, and internal audits.
- Exposure to asset management, vendor management, and office administration.
Skills & Certifications
- Strong understanding of Information Security, GRC, and compliance frameworks.
- Excellent communication, stakeholder management, and organizational skills.
- ISO 27001 Lead Auditor (LA) or Lead Implementer (LI) certification preferred.
- CISSP, CISM, or CISA certifications are a plus.
Preferred: Immediate joiners.
