Data Security Officer

UNTHINKABLE SOLUTIONS LLP â

OPEN ROLE

Cybersecurity & Compliance Lead ISO 27001

• Data Protection

• Client Assurance

• Security Governance

Full-Time Contract / Fractional

5+ Years Experience New Delhi / Remote

PROFILE OVERVIEW

We are a custom software development company delivering enterprise-grade web, mobile, desktop, cloud, and AI-enabled solutions to clients across multiple industries. In addition to custom software development, we maintain a portfolio of SaaS products. We are looking for an experienced Cybersecurity & Compliance professional who can establish, govern, and continuously improve our organisation's information security and data protection practices. The ideal candidate should possess strong expertise in ISO 27001, Data Protection Agreements (DPA), privacy regulations, client security compliance, and organisational security governance. The role is primarily focused on governance, compliance, risk management, and client assurance rather than hands-on penetration testing or security operations.

SKILLS REQUIRED

ISO 27001 ISMS governance and implementationâ

Data Protection Agreement (DPA) review and negotiationâ

GDPR, DPDP Act (India) and privacy regulation fluencyâ

Acting as Data Protection Officer (DPO)â

Security audit and compliance assessmentâ

Security policy and SOP draftingâ

Awareness training and employee educationâl

Vendor and client compliance managementâ

Cyber insurance questionnaire supportâ

Client-facing communication and documentation

ROLES & RESPONSIBILITIES01ISO 27001 Compliance Enforcement

Ensure all teams adhere to our ISO 27001 policies and controls. Continuously review and improve the ISMS, identify compliance gaps, and drive corrective actions across the organisation.

02DPA Review & Client Engagement

Review all Data Protection Agreements shared by clients, flag conditions that are not applicable or need modification, and engage clients directly with suggested changes. Ensure project teams comply with all agreed contractual security obligations throughout delivery.

03Data Protection Officer (DPO) Serve as the single point of contact for all privacy and security communications from clients. Handle inquiries, security questionnaires, audit requests, and coordinate response in the event of any incident or breach.

04Project Security Audits Conduct regular audits across active projects to verify adherence to security and data protection policies. Identify missing controls and ensure new additions are incorporated on an ongoing basis.

05Security Awareness & Training Plan and run regular cybersecurity awareness workshops for all employees â covering secure development practices, phishing, data handling, password hygiene, and policy updates. Maintain attendance records and training evidence for client audit purposes.

06Ongoing Cybersecurity Advisory Continuously assess our security posture and recommend improvements to policies, tools, and operational practices. Work with leadership to raise security maturity over time.

07Cyber Insurance Support Assist during procurement and renewal of cybersecurity insurance. Respond to insurer questionnaires and coordinate the collection of compliance evidence required by insurers.

DESIRED EXPERIENCE 5+ years in Information Security, Compliance, Risk Management, or Privacy Governance Prior experience with software development companies or SaaS organisations Familiarity with SDLC, cloud environments (AWS / Azure / GCP), and modern dev practices Certifications preferred: ISO 27001 Lead Implementer / Auditor, CISM, CISA, CISSP, CDPSE, CIPM, or equivalent

ENGAGEMENT MODELS We are open to multiple engagement structures. Whether you are looking for a full-time role or a flexible contractual arrangement, we are happy to discuss what works for your situation â as long as you are reachable during our standard business hours for meetings, client communications, and any time-sensitive compliance matters. Full-Time Standard employment Full availability

Part-Time / Hourly 3 hrs/day or fixed hours per week Monthly Retainer Fixed hours per month advisory basis Compensation is structured on an hourly, monthly retainer, or annual CTC basis depending on the model agreed. Business-hours availability is mandatory across all engagement types.

Interested candidates apply on this link- https://docs.google.com/forms/d/1GabAQ3DdWdR6gjfjlX0zsD1KVTNgIxQoNjvbPrN-35M/preview