Job Purpose
Your job is to make sure our SaaS platform is secure, audit-ready, and certifiable without slowing the company down. You’ll design and run our information security and compliance programs end-to-end—turning chaos into controls, and controls into certifications customers actually care about.
In a SaaS startup, security is revenue insurance. This role directly impacts:
• Enterprise deal velocity
• Customer trust & retention
• Long-term company valuation
You won’t be a back-office function. You’ll be a strategic enabler.
Duties and Responsibilities
A- Minimum required Accountabilities for this role
1. Security & Compliance Ownership
• Own the InfoSec and compliance roadmap for the company
• Define and maintain policies, standards, and controls (practical, not academic)
• Act as the single point of accountability for audits and certifications
2. Certifications & Frameworks (Core Mandate)
You will lead certification efforts end-to-end, including:
• ISO 27001 (ISMS design, implementation, audits)
• SOC 2 Type I & II
• GDPR, DPDP (India), and customer-driven security questionnaires
• Prepare evidence, manage auditors, close gaps—no outsourcing responsibility
3. Risk, Controls & Security Governance
• Conduct risk assessments and threat modeling for SaaS architecture
• Translate risks into prioritized, business-aligned controls
• Own vendor risk management and third-party security reviews
4. Engineering & Product Partnership
• Work directly with Engineering, DevOps, and Product teams
• Embed security into SDLC, CI/CD, cloud infrastructure, and data flows




• Push for automation over manual controls wherever possible
5. Incident & Response Readiness
• Define and maintain incident response, BCP, and DR plans
• Lead tabletop exercises and post-incident reviews
• Ensure real preparedness—not just documented plans
6. Customer & Sales Enablement
• Support enterprise sales with security narratives and compliance evidence
• Respond to customer security assessments and due-diligence reviews
• Act as a credibility multiplier, not a bottleneck

B- Additional Accountabilities pertaining to the role
Leadership Expectations
? Think systems-first, not tool-first.
? Bias for automation and simplicity.
? Calm under pressure; decisive during incidents.
? Business-aware: understands how infra decisions affect revenue, customers, and growth.
? Comfortable pushing back on bad ideas—even from senior stakeholders.
Major Challenges
? Core certifications achieved and renewed with minimal audit friction
? Security controls embedded into engineering workflows
? Reduced sales friction due to faster, confident compliance responses
? Clear risk posture that leadership actually understands
? No “security theater”—only controls that work




Required Qualifications and Experience
a) Qualifications
• Post Graduates with relevant sales experience of 6-8 years (also graduates with experience of 8-10 years may apply)

b) Work Experience
• Relevant sales experience in managing large sales channels in multiple market environments
• Prior & relevant experience in the Financial Services Industry would be an added advantage.
• Demonstrated success & achievement orientation.
• Excellent communication skills.
• Strong bias for action & driving results in a high performance setting.
• Demonstrated ability to lead from the front.
• Excellent relationship skills.
• Strong analytical skills to drive channel performance and drive profitability.
• Exceptionally high motivational levels and needs to be a self-starter.
Must-Have
• 5–10+ years in InfoSec, GRC, or compliance roles (SaaS or cloud-native preferred)
• Proven ownership of ISO 27001 and/or SOC 2 certifications
• Strong understanding of:
o Cloud security (AWS / Azure / GCP)
o SaaS architecture & multi-tenant systems
o Data protection & privacy regulations
• Ability to write clear, audit-grade documentation that engineers don’t hate
• Comfortable pushing back on leadership when risk is real
Nice-to-Have (Big Plus)
• Experience in early-stage or scaling SaaS startups
• Automation mindset (GRC tools, evidence pipelines, scripts)
• Certifications like ISO 27001 LA, CISA, CISSP, or similar
• Experience dealing with global customers and enterprise procurement teams

📌 Lead - Technology as a Business/Senior Lead - Technology as a Business (Maharashtra)
🏢 Bajaj Finance
📍 Maharashtra