Security & Compliance Specialist
New
R
Rolling ArraysInformation security
Location: IndiaFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Clear written English
- Experience
- 4–8 years in information security, including 2+ years hands-on in GRC at a SaaS or technology company.
- Required Skills
- Google Workspace
Requirements
- Have 4–8 years of experience in information security, including at least 2 years of hands-on GRC experience at a SaaS or technology company.
- Have experience running or supporting ISO 27001 and/or SOC 2 audits end to end, including evidence collection and auditor engagement.
- Have experience working with a compliance automation platform; Scrut is preferred, with Vanta, Drata or Sprinto acceptable.
- Have solid AWS cloud security fundamentals, including IAM, VPC, KMS, CloudTrail and GuardDuty.
- Be familiar with secure SDLC and application security, including OWASP Top 10 and SAST/SCA.
- Have clear written English and confidence communicating with senior audiences, including the board, and working across teams without direct authority.
- DevOps experience with CI/CD, containers, infrastructure as code, and Python or Bash scripting is beneficial.
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CISM, CRISC or AWS Certified Security – Specialty are beneficial.
- Privacy and data protection experience, including ISO 27701, DLP tooling or ISO 42001 AI governance, is beneficial.
- Hands-on IT asset management experience with MDM tooling is beneficial.
- Exposure to banking or public-sector customers in Southeast Asia is beneficial.
Responsibilities
- Run the ISMS and Scrut as the system of record for policies, risks, assets, control mapping and evidence.
- Coordinate ISO and SOC 2 audits, internal audits and corrective actions through to closure.
- Manage vendor and sub-processor risk and track PDPA, GDPR, MAS TRM and BNM RMiT obligations.
- Complete customer security questionnaires, vendor-risk assessments and due-diligence packs; respond to customer audit requests and inquiries.
- Set data protection practices for classification, handling, retention and disposal, and operate controls to prevent and investigate data leakage.
- Administer Google Workspace and core SaaS tools, including Jira, Bitbucket and Slack, covering accounts, SSO/MFA and access matrices.
- Own IT asset management and endpoint security, including MDM, inventory, encryption, patching, returns and secure disposal.
- Embed SAST, SCA and secret scanning in CI, and manage VAPT findings through remediation and verification.
- Review cloud security posture across AWS and Google Workspace, and support incident response, access reviews and security awareness training.
View Full Description & ApplyYou'll be redirected to the employer's site
