13 Oct
|
Setu
|
Bengaluru
Intern - Information Security
Experience: Fresher
Location: Bangalore
About Setu
Setu is working to reimagine financial products for the next billion users. By reducing the cost of distribution, we break down financial products into fundamental building blocks and offer them as APIs to businesses, enabling them to package these APIs into custom apps. We believe that fintech will be a core part of every company's offering, and we are building the infrastructure to accelerate this.
Setu is an acquired entity of Pine Labs, one of the fastest-growing fintech companies in India. At Pine Labs, we share a core belief: 'Every Day is Game Day'. We aim to enrich the world through digital commerce and financial services.
Importance of the Role
At Setu, we believe that every company can become a fintech company. Because financial services is a highly regulated sector, our mission to act as a bridge between regulated financial institutions (asset partners) and technology companies comes with significant audit and compliance responsibilities. Our asset partners have very high expectations regarding direct access to their technical infrastructure, which includes vendor audits and continuing audits on a set schedule.
Any compromise would cause serious legal and business repercussions, which means we take audits extremely seriously.
As an intern, you will be part of the Information Security team which reports to the entity CISO, helping guard Setu's reputation as a dependable player in the eyes of regulators and partners.
What Will You Do at Setu?
Your key objective will be to assist the team in ensuring that Setu's systems achieve and maintain a high standard in audit preparedness. In this role, you'll spend your time doing the following:
- Implement, maintain, and improve a best-in-class information security,
risk & compliance management framework.
- Ensure that Setu achieves and maintains relevant certifications such as ISO 27001:2022, SOC2 Type 2, Data localization and other relevant certifications as well as regulatory guidelines, and proactively recommend and plan for new certifications/audits that will be helpful for Setu from a business and technical perspective.
- Primarily manage customer assurance by responding to information security questionnaires and queries.
- Review Information Security clauses in partner agreements.
- Plan, prepare for, and conduct process-led internal, external, and vendor audits.
- Work alongside colleagues in Engineering and Customer Success to improve security compliance and reduce risks.
- Review and update security policies and standards regularly to keep pace with new threats and changing industry practices based on security and compliance requirements.
- Monitor internal and external security advisories that impact security, risk, and compliance requirements.
- Help in managing and improving Setu's security, compliance, assessment, and testing programs.
Who Is the Right Fit for This Role?
To excel in this role you will need:
- Enthusiasm and Foundation: You are a fresher with a strong background and enthusiasm for information security.
- Baseline Knowledge: You have a foundational understanding of ISO 27001, SOC2, PCI DSS, RBI guidelines, and Data Localization concepts.
- Patient and Detail-oriented: Errors lead to rework and a loss of effort, so you must be meticulous. You will be dealing with stakeholders and legacy infrastructure, which requires patience.
- Process-driven: You enjoy thinking of and implementing processes that can streamline complex handovers.
- Accountability: You understand how to bring accountability into processes through checklists and sanity checks.
- Career Growth: This role serves as an excellent opportunity for you to showcase your skills and potentially convert into a full-time position based on your performance.
Why Setu?
We will empower you to do the most impactful work of your career:
- Opportunity to work closely with the founding team who built and scaled public infrastructure such as UPI, GST, Aadhaar, etc.
- A fully stocked library and an unlimited book budget.
- Tickets to conferences and industry events.
- Learning sessions where team members and external experts teach you something new.
- Learning and development allowance for courses, subscriptions, and certifications.
- Kick-ass perks include comprehensive health insurance, personal accident insurance, access to mental health counsellors, and a beautiful office.
- A diverse team where hiring is done purely on merit, skill, and competence.
Our Core DNA
Our culture code, 'How We Move', defines our behaviors:
- Take the shot: You decide fast and deliver right.
- Sign your work like an artist: You master what you do and take pride in it.
- Be the sherpa: You lead your crew on every expedition.
- Be the CEO of what you do: You own it and make things happen.
- Care with tough love: You empower others with trust, respect, and openness.
- Own tomorrow: You innovate for the customer and beyond.
📌 Infosec Intern (Bengaluru)
🏢 Setu
📍 Bengaluru