WNS, part of Capgemini, is an Agentic AI-powered leader in intelligent operations and transformation, serving more than 700 clients across 10 industries, including Banking and Financial Services, Healthcare, Insurance, Shipping and Logistics, and Travel and Hospitality. We bring together deep domain excellence – WNS’ core differentiator – with AI-powered platforms and analytics to help businesses innovate, scale, adapt and build resilience in a world defined by disruption.Our purpose is clear: to enable lasting business value by designing intelligent, human-led solutions that deliver sustainable outcomes and a differentiated impact. With three global headquarters across four continents, operations in 13 countries, 65 delivery centers and more than 66,000 employees, WNS combines scale, expertise and execution to create meaningful, measurable impact.

Job Title: Information Security Audit – Lead Analyst Experience: Minimum 3-4 years of which 1.5 years on ISMS implementation roleKey Responsibilities: 1. Should work along with internal lead auditor and team to evaluate the design and effectiveness of the organization’s information systems and implemented security controls to ensure controls are implemented as per latest ISMS standard2. Conduct ISMS internal audits (IT, InfoSec, Physical Security, People Security, Software development (SDLC), security awareness, contract review, vendor review etc). 3. Ensure recommendations provided during internal audits are implemented by relevant departments to enhance system security and reduce potential risks4. Help and guide respective stakeholders to achieve compliance with relevant security regulations and standards.5. Conduct internal information security audits and prepare detailed reports on audit findings, which can be demonstrated along with lead auditor to Infosec leaders and CISO.6. Collaborate with different internal departments like IT, HR, Physical Security, Procurement, Legal, Application Development etc, to ensure that security measures are implemented and working effectively.7. Plan and conduct periodic training and guidance to employees on information security best practices.8. Review and update the security policies and procedure documents atleast annually.9. Perform regular follow-up / adhoc audits to ensure that recommended changes have been implemented effectively 10. To ensure management response along with RCA is received from respective stakeholders along with closure timelines and same is tracked till closure.11. Coordinate with respective stakeholders during external certifications/audits (like ISO 27001, PCI DSS, HITRUST, HIPAA, GDPR, SOC1 or 2 etc..) and client audits to ensure requested data is complete and shared on timely basis.12. Conduct pre-audit checks prior any client / external certification audits.Desired Skills: 1. Should have good knowledge about ISMS requirements and control implementation experience2. Good communication and analytical skills.3. Ability to grasp new technical concepts. Note: Should have knowledge of ISMS requirement and should be able to implement missing controls if any, to fulfil ISMS requirement.

Graduation + ISMS Implementer