1. Key responsibilities

1.1 Practice leadership and P&L

• Own the practice profit and loss: revenue, gross margin, utilisation and cost of delivery, against annual targets agreed with the CISO and CTO.
• Prepare the annual practice plan and budget: services, headcount, tools, training and partner capacity.
• Set pricing and effort-estimation standards for each service line, and approve proposal pricing within delegated limits.
• Lead business development with the sales team: client meetings, scoping calls, proposals, presentations and renewals.
• Report monthly to the CISO and CTO on pipeline, delivery status, margin, risks and quality

1.2 CERT-In audits and VAPT

• Lead the delivery of CERT-In audits and VAPT (web, mobile, API, network, cloud and configuration reviews), in line with CERT-In’s audit guidelines and directions.
• Plan, scope and staff each audit, using only J&S employees declared to CERT-In.
• Make sure reports meet CERT-In’s reporting, sign-off and submission requirements, ready for the CISO’s authorisation as head of the auditing organisation.
• Present scope and findings to client leadership, and run follow-up audits through to closure.

1.3 CREST accreditation and CREST-aligned services

• Lead J&S from CREST Pathway+ to full CREST accreditation.
• Build CREST-aligned methods for penetration testing, vulnerability assessment and incident response.
• Develop team members towards CREST individual qualifications.

1.4 Global framework readiness and implementation

• Lead readiness and implementation engagements for ISO/IEC 27001, ISO/IEC 27701, ISO 9001, ISO/IEC 20000-1, NIST CSF, SOC 2, PCI DSS, the DPDP Act, 2023 (India), Cyber Essentials (UK) and Essential Eight (Australia).
• Oversee gap assessments, risk assessments, policy sets, internal audits and management review support.
• Prepare clients for external audit. The client engages an independent certification body accredited under the Global ACI MRA (formerly the IAF MLA). neXavault does not certify.

1.5 Independence, quality and risk

• Make sure the team that implements a client’s controls never audits the same client, and run conflict-of-interest checks before accepting work.
• Own the practice quality system: methods, peer review and report quality gates.
• Make sure client and audit data is handled securely, in line with CERT-In’s data-handling guidelines and client contracts.
• Keep the practice risk register, and escalate independence concerns to the CISO.

1.6 Empanelments and accreditations

• Keep J&S’s CERT-In empanelment and CREST Pathway+ status in good standing, including staff records and renewals.
• Keep a register of team qualifications and training, and close skill gaps.
• Support the CISO on J&S’s internal ISMS.

1.7 People and partners

• Hire, lead and develop the team.
• Plan resourcing across in-house staff and associate partners (partners are not used on CERT-In audits).
• Build a culture of ethical, careful and well-documented work.

2. Qualifications and experience

2.1 Essential

• 8-12 years in cyber security, including at least 3 years leading audit, testing or GRC teams.
• Hands-on experience delivering CERT-In audits and VAPT engagements.
• ISO/IEC 27001 Lead Auditor certification (a qualification CERT-In records for declared audit staff).
•  Working knowledge of ISO/IEC 27001, NIST CSF, the DPDP Act, 2023, and at least one other framework listed in section 3.4.
• Proven experience managing a budget, pricing work or contributing to business development.
• Excellent report writing and client presentation skills in English.
• A bachelor’s degree in Computer Science, IT, Engineering or a related field.

2.2 Desirable

• One or more of: CISSP, CISA, DISA (ICAI), CISM.
• One or more offensive-security qualifications, such as OSCP or a CREST individual qualification.
• Experience taking an organisation through CREST accreditation, or working in a CERT-In empanelled auditing organisation.
• Exposure to UK, Australian or Gulf client work.
• Knowledge of ISO/IEC 27701, ISO 9001 or ISO/IEC 20000-1.

3. Skills and behaviours

• Commercial judgement: prices work correctly, protects margin and spots growth opportunities.
• Technical credibility: can review a penetration test finding and a control design with equal confidence.
• Integrity: applies independence and ethics rules even under client or commercial pressure.
• Leadership: builds, coaches and holds a team to high standards.
• Clear communication: explains technical risk in plain language to senior client stakeholders.
• Organisation: runs several engagements at once without losing quality.

4. What we offer

•  A competitive salary with a performance bonus linked to practice results.
• Sponsorship of relevant professional certifications.
• An annual learning and conference budget.
• The chance to build and lead a growing cyber assurance practice.

5. Equal opportunity

John & Smith is an equal-opportunity employer. We welcome applications from all qualified candidates, whatever their gender, age, religion, caste, disability, sexual orientation or background.

How to apply: send your CV and a short cover note to careers@johnandsmithglobal.com, with the subject line “Head of Cyber Assurance & Operations”.

neXavault - The Cyber Armour - is the cybersecurity, risk and compliance practice of John & Smith, helping organisations secure their operations and meet the frameworks, standards and regulations that matter to their business.

Contact

audits@johnandsmith.co.in · +91 62820 07077 · www.johnandsmithglobal.com
Principal office: Amenity Block, Lulu IT Twin Towers, SmartCity SEZ, Kakkanad, Kochi, Kerala 682042, India

Offices: India · UAE · UK

• Build and launch the GSOC from inception to full maturity

• Lead 24/7 SOC operations, monitoring, threat detection & incident response

• Recruit, train & manage SOC teams (Tier 1–3)

• Implement & optimize SIEM, SOAR, EDR, TIP & security tool stack

• Develop SOC processes, IR playbooks, SLAs, KPIs, dashboards

• Conduct threat hunting, threat intelligence & major incident handling

• Ensure compliance (ISO 27001, SOC 2, GDPR, DPDP, PCI, HIPAA)

• Manage client communication, reporting & escalations

• Drive automation, SOC maturity improvements & operational excellence

Required Qualifications

• Btech, BE, Bsc CS, BCA or equivalent

• 8–12 years in cybersecurity with 3–5 years in SOC leadership

• Hands-on SIEM experience (Splunk / QRadar / Sentinel)

• Strong incident response, threat intel, threat hunting expertise

• Certifications preferred: GCIH, GSOC, CISSP, CISM, CEH, Splunk Certified

• Experience managing 24/7 shifts and global clients

Skills Needed

• Expert: SIEM, SOAR, EDR, IDS/IPS, Vulnerability Management

• Strong: MITRE ATT&CK, NIST CSF, ISO 27001, SOC 2

• Cloud security (AWS/Azure/GCP), network security, scripting (Python/PowerShell)

• Leadership, communication & stakeholder management

What We Offer

• Salary ₹15–25 LPA  performance bonuses

• Build a GSOC from ground up,  high-impact leadership role

• Advanced certification sponsorships & conference budgets

• Modern GSOC facility at Lulu Twin Towers

• Global exposure with multi-industry clients

• Health insurance, flexible benefits & growth path toward Director/CISO roles

neXavault, the cybersecurity arm of John & Smith Solutions, is a CERT-In and CREST approved organization providing comprehensive security solutions across India and internationally. With our recent CERT-In empanelment as an Information Security Auditing Organization, we're positioned for exponential growth in government and enterprise segments. Our team delivers specialized cybersecurity services from offices in Kozhikode, Kochi, Trivandrum, Mumbai, Hyderabad, Noida, Bangalore, Middle East, and UK.

About John & Smith

John & Smith is a growing organisation built on the belief that great service starts with great people. We work alongside industry leading clients, delivering customer experiences that stand apart, and we invest just as much in the people who make that happen. Here, work is more than just a job. It is a place to grow, to be supported, and to build a career you actually enjoy.

Customer Relationship Executive

Location: Govt Cyberpark, Kozhikode Employment Type: Full Time

We are currently hiring for our Customer Relationship Executive position. In this role, you will represent our industry leading clients, connect with customers every day, and play a key part in delivering the kind of service that keeps people coming back.

At John & Smith, we do not just offer a job, we help you invent a career. Through ongoing training and development, you will sharpen your communication, sales, and customer service skills, building a foundation that supports you wherever your career takes you next.

What We Offer

• A culture that believes in the power of working and communicating as a team

• A culture that supports the unique needs and career aspirations of every individual

• Comprehensive training and development throughout your tenure, designed to challenge you and help you grow

• The opportunity to invent your own career path

• Rotational schedules, including alternate weekends off

• Strong internal advancement opportunities, as we promote heavily from within

• A genuine second family

What We Are Looking For

• Flexibility to adapt to change within a growing organisation

• A positive attitude paired with a drive for success

• Computer proficiency

• Strong listening and problem solving abilities

• A genuine passion for helping people

• Dependability, reliability, and strong attention to detail

• Strong communication skills in English

Why You Should Be Part Of Our Team

We promote heavily from within, giving you the chance to learn directly from one of the most experienced leadership teams in the industry. Throughout your career at John & Smith, you will have opportunities to mentor others, join committees, and position yourself for growth into leadership. At minimum, you will leave this role equipped with skills that translate into lasting careers across communication, customer service, member services, and sales.

How to Apply

Interested candidates can send their CV to hr@johnandsmith.co.in or contact us directly at +91 977 89 97202.

We’re Hiring | Customer Relationship Executive
📍 Govt Cyberpark Kozhikode 

John & Smith is looking for a proactive and customer-focused Customer Relationship Executive to join our growing team. If you have strong communication skills and experience handling customers or bookings, we’d love to hear from you!

🔹 Position Details

Job Title: Customer Relationship Executive
Qualification: Bachelor’s Degree 
Experience: 1 to 2 years

🔹 Key Responsibilities

• Handle inbound and outbound calls related to client bookings and service requests
• Maintain accurate booking records and regularly update the CRM system
• Coordinate with operations and staffing teams for timely shift allocation
• Address client queries and concerns while ensuring high service standards
• Support the booking team with daily reports and follow-up communications

🔹 Required Skills & Competencies

• Strong communication and customer service skills
• Good computer proficiency (MS Office, CRM systems)
• Excellent coordination and multitasking abilities
• Positive attitude with a strong team-oriented mindset
• Fluency in English

🔹 Preferred Background
Healthcare staffing, BPO, customer service, or HR support

neXavault, the cybersecurity arm of John & Smith Solutions, is a CERT-In empanelled Information Security Auditing Organization. With our expanding presence across India and international markets, we're the trusted partner for organizations seeking robust security compliance and governance frameworks. Our 100% certification success rate speaks to our expertise in navigating complex regulatory landscapes