Specialist - Information Security

We never ask for payment as part of our selection process, and we always contact candidates via our corporate accounts and platforms. If you are approached for payment, this is likely to be fraudulent. Please check to see whether the role you are interested in is posted here, on our website.

TMF Group is a leading global provider of high-value business services to clients operating and investing globally. We focus on providing specialized and business-critical financial and administrative services that enable our clients to operate their corporate structures, finance vehicles and investment funds in different geographical locations. TMF India is a Great Place to Work, ISO & ISAE certified organization.

The Information Security Specialist plays a key role in ensuring TMF’s Information Security Management System is effectively implemented across the region. The role supports and guides Local Security Officers, facilitates internal audits, manages nonconformities, and ensures compliance with global information security standards such as ISO 27001 and ISAE 3402. This position is essential in strengthening TMF’s security posture by driving continuous improvement, promoting best practices, and ensuring that security risks are identified, monitored, and effectively addressed.

Audit Management & Governance Drive and monitor internal audits in alignment with the company’s audit program and procedures. Coordinate and follow up on audit planning with Local Security Officers (LSOs) and Functional IT teams. Analyze audit needs, provide recommendations, and ensure audit plans are distributed to all LSOs. Act as the primary interface between auditors and LSOs, facilitating smooth execution of audits. Stakeholder Communication & Support Ensure audit findings and conclusions are clearly understood by LSOs through periodic meetings, training sessions, and workshops. Promote a culture of continuous improvement across the region, identifying opportunities to enhance security processes. Nonconformity Management Monitor, manage, and track nonconformities to ensure timely resolution. Ensure nonconformities are correctly logged in the system and notify relevant stakeholders as required. Process Improvement & Compliance Lead and coordinate initiatives to improve processes and enhance response procedures. Serve as the subject matter expert on ISO 27001 and ISAE 3402, offering guidance and ensuring compliance across the region.

Technical & Professional Requirements Expertise in Information Security Management Systems (ISMS). Strong understanding of ISO 27001, ISAE 3402, and industry‑standard security frameworks. Experience coordinating audits, assessing risks, and working with regional/local security teams. Knowledge of nonconformity handling, governance processes, and continual improvement methodologies. Skills & Competencies Strong communication and stakeholder management skills, especially when engaging with auditors and Local Security Officers. Ability to analyze audit reports and develop actionable insights. Detail‑oriented, organized, and capable of working across multiple regions simultaneously. Problem‑solver with the ability to drive process improvements and monitor compliance. Additional Expectations Ability to facilitate workshops, meetings, and training sessions to improve understanding of security requirements. Capable of coordinating with IT functional teams and security personnel across diverse locations. Proactive in identifying risks, recommending improvements, and maintaining documentation accuracy.

Pathways for career development Work with colleagues and clients around the world on interesting and challenging work. We provide internal career opportunities, so you can take your career further within TMF. Continuous development is supported through global learning opportunities from the TMF Business Academy.