Skills required :

- Candidate with strong work experience covering IAM, vulnerability management, Application Security, incident management handling, governance, and risk and compliance.

- Prior experience supporting SOC2 readiness or ISO certifications - preferred.

- AWS Cloud Security knowledge - preferred.

- Client interaction skills - preferred.

- Security+ or CISSP certifications - preferred.

- 4-7 yrs Information Security experience.

- Please do not apply if you are not from Mumbai.

Key Responsibilities :

- Execute comprehensive vulnerability management programs, including scanning, prioritization, and remediation tracking, to minimize the attack surface of our critical financial applications.

- Lead IS GRC initiatives by conducting internal audits and mapping security controls to ISO27001 standards to maintain regulatory compliance and operational excellence.

- Manage Identity and Access Management (IAM) and Privileged Access Management (PAM) frameworks to ensure the principle of least privilege is enforced across all production environments.

- Coordinate incident management efforts by investigating security anomalies and driving root cause analysis to prevent future occurrences and protect sensitive financial data.

- Partner with software development teams to integrate application security best practices into the CI/CD pipeline, ensuring security is embedded at every stage of the development lifecycle.

- Communicate security risks and compliance status to non-technical stakeholders, providing clear recommendations that align with the company's risk appetite and business goals.