Security Engineer · Mumbai

Responsibilities

• Set & Manage Compliance Program for Information & Cyber Security Requirements (e.g. regulatory, ISO27001 standards, PCI DSS)

• Develop a set of security standards, technical solutions, strategies, ISO requirements and best practices for the organization, and recommend security enhancements to management as needed.

• You'll drive large programs across teams to address Information Security needs & influence the successful, on-time, and on-budget delivery of Information Security projects.

• Develop, Maintain & oversee Information Security Policies, Processes and standards/guidelines to address all applicable regulatory and ISO requirements.

• Work on new security tools to help mitigate security vulnerabilities and automate repeatable tasks.

• Development and implementation of Information & Cyber Security Assurance Program

• Manage Third Party Risk Assessment Program

• Handle InfoSec Audits (internal/external), Conduct Awareness Trainings

• You will assist the organization towards planning and carrying out an organization's needs on InfoSec aspect & influence the successful, on-time, and on-budget delivery of Information Security projects.

• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

Industry

• Fintech/ Payments, Banking, Network, Consulting

Desired Profile

• 7 years of relevant experience with Software Companies (Banking/Payments/Fintech domain is preferred)

• Bachelor's degree with a preference in Engineering, or technical related field with relevant certifications in security-based specialization.

• Experience driving and governing audits and practice standardization (PCIDSS, ISO 27001, etc) across multiple teams.

• Hands on experience with audits, InfoSec compliances, Vulnerability assessments.

• Experience with technologies and processes such as networks, encryption, vulnerability management, identity and access management, endpoint management, risk management, and cloud services. Good to have Familiarity and understanding of OWASP.

• Basic knowledge of software development lifecycles and methodologies

• Experience presenting and influencing top-line management and executives on the importance of Information Security.

• Expert problem solver, using proven methods to solve difficult issues effectively

• Proven conflict management skills and remains composed under pressure

• Good understanding of infrastructure, including web & cloud technologies and network architecture.