12 Aug
|
Glomopay
|
Bengaluru
12 Aug
Glomopay
Bengaluru
As a member of the Information Security Team at Glomopay, you will own the entire information security
function — from policy and governance to hands-on implementation and regulatory compliance. Reporting
directly to the Head of Information Security, this is a strategic role for a security practitioner who can single-handedly stand up a mature InfoSec program for Glomo
Key Responsibilities
Security Governance & Compliance
Own the Information Security Management System (ISMS) — policy framework, risk assessments and control implementation aligned with ISO 27001, PCI DSS, and IFSCA Cyber Security and
Cyber Resilience Framework
Lead compliance with RBI outsourcing directions, IFSCA circulars, DPSC guidelines, and PCI SSF requirements applicable to payment service providers
Own third-party risk management — conduct due diligence audits on all technology partners and maintain records per regulatory requirements
Drive the internal IT audit program — plan, execute, engage external audit vendors, and track findings to closure
Establish the Information Classification framework,
embedding it into DLP rules, employee training, and daily operations
Security Operations & Architecture (Hands-On)
Build and manage the SOC function — starting with MDR-augmented operations (CrowdStrike), progressively maturing toward hybrid capability
Own the SIEM strategy: integrate and monitor all critical log sources (application, infrastructure, database, identity, PAM) and build detection use-cases
Conduct threat modelling Manage Privileged Access Management (PAM) — session monitoring, password rotation,break-glass procedures, periodic user access reviews
Implement and manage DLP controls across endpoints, email, and cloud storage (Google Workspace DLP, CrowdStrike Device Control)
Own endpoint security — hardening SOPs against CIS benchmarks, approved software lists, full disk encryption
Drive network security posture — geo-fencing, firewall rule reviews, Cloud IDS tuning across GCP infrastructu
📌 Information Security Associate (Bengaluru)
🏢 Glomopay
📍 Bengaluru