Responsibilities

- Set & Manage Compliance Program for Information & Cyber Security Requirements (e.g. regulatory, ISO27001 standards, PCI DSS)
- Develop a set of security standards, technical solutions, strategies, ISO requirements and best practices for the organization, and recommend security enhancements to management as needed.
- You'll drive large programs across teams to address Information Security needs & influence the successful, on-time, and on-budget delivery of Information Security projects.
- Develop, Maintain & oversee Information Security Policies, Processes and standards/guidelines to address all applicable regulatory and ISO requirements.
- Work on recent security tools to help mitigate security vulnerabilities and automate repeatable tasks.
- Development and implementation of Information & Cyber Security Assurance Program
- Manage Third Party Risk Assessment Program
- Handle InfoSec Audits (internal/external), Conduct Awareness Trainings
- You will assist the organization towards planning and carrying out an organization's needs on InfoSec aspect & influence the successful, on-time, and on-budget delivery of Information Security projects.
- Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

Industry

- Fintech/ Payments,



Banking, Network, Consulting

Desired Profile

- 7 years of relevant experience with Software Companies (Banking/Payments/Fintech domain is preferred)
- Bachelor's degree with a preference in Engineering, or technical related field with relevant certifications in security-based specialization.
- Experience driving and governing audits and practice standardization (PCIDSS, ISO/IEC 27001:2022, etc) across multiple teams.
- Hands on experience with audits, InfoSec compliances, Vulnerability assessments.
- Experience with technologies and processes such as networks, encryption, vulnerability management, identity and access management, endpoint management, risk management, and cloud services. Good to have Familiarity and understanding of OWASP.
- Basic knowledge of software development lifecycles and methodologies
- Experience presenting and influencing top-line management and executives on the importance of Information Security.
- Expert problem solver, using proven methods to solve difficult issues effectively
- Proven conflict management skills and remains composed under pressure
- Good understanding of infrastructure, including web & cloud technologies and network architecture.

📌 Sr. Information Security Engineer (India)
🏢 BillDesk
📍 India