Security & Compliance Engineer

Accountabilities:

• Provide first-response and operational support for information security incidents, including containment, escalation, response, and recovery activities.
• Develop, maintain, and continuously improve security incident response runbooks, procedures, and operational processes.
• Coordinate with SOC, MDR, and managed security service teams to investigate, contain, and resolve security incidents.
• Support incident investigations, documentation, root-cause analysis, post-incident reviews, and remediation tracking.
• Monitor and track security incidents, actions, escalations, remediation activities, and resolution status.
• Support ISO 27001 information security management and compliance activities, including security controls and documentation.
• Contribute to PDPL compliance initiatives, assessments, security controls, and related documentation.
• Support information classification, handling requirements, records management, and broader information governance processes.
• Coordinate internal and external security audits and provide accurate evidence and supporting documentation.
• Maintain security risk registers and track risk mitigation and remediation activities.
• Prepare monthly security metrics, dashboards, management reports, and governance updates.
• Support periodic security and governance reviews, including Y1.2 reviews and related assessment activities.
• Administer and support BeyondTrust Privileged Access Management (PAM), including privileged access reviews and governance.
• Review privileged access, access controls, approvals, and associated security requirements.
• Coordinate security initiatives with governance, compliance, IT, security, and business stakeholders.
• Support security control assessments, compliance reviews, and remediation tracking.
• Maintain accurate security policies, procedures, records, audit evidence, and governance documentation.
• Identify opportunities to strengthen security operations, incident readiness, information governance, and compliance processes.

Requirements:

• 5+ years of professional experience in IT security, information security, cybersecurity, security governance, compliance, or a related field.
• 3+ years of hands-on experience in incident response and security operations.
• 2+ years of experience working with ISO 27001 and PDPL compliance or comparable information-security regulatory frameworks.
• 2+ years of experience in information governance, including information classification and records management.
• Strong understanding of security incident response, including containment, escalation, investigation, recovery, and post-incident activities.
• Experience developing and maintaining incident response runbooks, procedures, and operational documentation.
• Experience coordinating with SOC, MDR, or managed security service providers.
• Hands-on experience administering BeyondTrust Privileged Access Management (PAM).
• Strong understanding of privileged access management, access governance, and security controls.
• Experience maintaining security risk registers, supporting risk assessments, and tracking remediation activities.
• Experience preparing security metrics, management reports, audit evidence, compliance documentation, and governance reports.
• Strong knowledge of ISO 27001, information security governance, risk management, and audit processes.
• Practical knowledge of PDPL requirements and information governance principles.
• Strong coordination and stakeholder-management skills, with the ability to collaborate across security, governance, compliance, IT, and business functions.
• Excellent written and verbal communication skills.
• Strong analytical, documentation, problem-solving, and organizational abilities.
• Ability to work independently in a remote environment while managing multiple security and compliance priorities.

Benefits:

• Salary range of INR 10–20 LPA (approximately ₹1,000,000–₹2,000,000 per year).
• Full-time employment.
• Fully remote position based in India.
• Opportunity to work across information security operations, incident response, compliance, governance, and risk management.
• Exposure to security frameworks and regulatory requirements including ISO 27001 and PDPL.
• Opportunity to work with privileged access management and security operations technologies.
• Cross-functional collaboration with security, IT, governance, compliance, and business teams.
• Opportunity to contribute to security process improvements, incident readiness, and scalable governance practices.