Key Responsibilities

Security Engineering :

- Apply secure configuration baselines and hardening across operating systems, databases, and cloud environments.
- Automate security processes where possible to improve efficiency and reduce manual overhead.
- Support performing security and vulnerability assessments.
- Support IT teams in implementing patches.
- Support threat hunting, root cause analysis, and post-incident improvement efforts.

Risk, Compliance & Governance :

- Identify and assess security risks associated with IT systems and develop strategies to mitigate these risks.
- Develop, document, and enforce security policies, standards, and procedures.
- Conduct risk assessments and implement risk mitigation measures and monitor their effectiveness.
- Ensure compliance with frameworks and regulations such as NIS2, GDPR, ISO 27001, NIST, IEC 62443, and Chinese data and cybersecurity regulations.
- Perform vendor and third-party risk assessments.
- Support the implementation of business continuity, disaster recovery, and incident response plans.

Collaboration & Communication

- Act as a trusted advisor to internal teams on security best practices and secure solution design.
- Translate complex security topics into actionable guidance for both technical and business stakeholders.

Qualifications

- Bachelor’s degree in Information Security, Computer Science, or a related technical field.
- 8–12 years of cybersecurity experience,



with both GRC and hands-on engineering background.
- Strong understanding of frameworks and regulations such as NIS2, GDPR, ISO 27001, NIST, and Chinese data and cybersecurity regulations.
- Robust working knowledge of regulatory compliance requirements in NIS2.
- Familiarity with GRC tools, data protection, and risk assessment methodologies.
- Working knowledge of Microsoft Azure, AWS, or OCI security services.
- Experience with tools such as SIEM, EDR, vulnerability scanners, and cloud-native controls will be an advantage
- Knowledge of IAM concepts including SSO, MFA, PAM, and access reviews.
- Relevant certifications a plus: CRISC, CISA, ISO/IEC 27001 Lead Auditor or similar.

About 7N

Over decades, 7N has been part of several waves of digitalization. Today, our consultants work across industries and geographical borders to deliver the projects that define the new digital realities. We offer a highly specialized portfolio of IT services and solutions delivered by the top 3% of IT professionals. Our expertise spans across many industries, providing digital transformation across all phases of the IT project life cycle.

By engaging early with 7N, you benefit from our experience and expertise when defining the project scope and strategic needs, and you gain flexibility to accommodate changing demands while maintaining control and ownership of IT development.

📌 Senior Security Engineer and GRC Specialist (India)
🏢 7N
📍 India