The Security Department is a critical function within our organization, reporting directly to the CEO and responsible for safeguarding the security of our operations on a global scale. This department is divided into three specialized teams: the Security Operations Team, the Security Compliance Team, and the Fraud Prevention Team.
The Security Operations Team focuses on the implementation and management of advanced security technologies, monitoring, and responding to threats in real-time to ensure the protection of our systems, networks, and data.
The Security Compliance Team ensures that our security policies, procedures, and practices adhere to industry standards and regulatory requirements, working closely with business departments to maintain and enhance our compliance posture.
The Fraud Prevention Team is dedicated to identifying, preventing, and mitigating fraudulent activities across all facets of the organization, ensuring the integrity of our operations and protecting against financial and reputational risks.
Together, these teams collaborate to deliver a comprehensive security strategy that protects our assets and supports our global operations.
POSITION
We are currently seeking a Security Compliance Engineer (all genders)to join our Security Team in Chandigarh /Mohali. Reporting to the CISO, this role is pivotal in securing our enterprise application landscape, including modern cloud architecture, using state-of-the-art security tools. Our strategic goal is to achieve and maintain ISO27001 certification in addition to our TISAX label and PCI-DSS certification, which requires establishing and rolling out an ISMS, supporting business departments in defining their procedures, and ensuring compliance.
CHALLENGE
Compliance Management
Design and implement security policies and procedures, especially in the context of industry standards like ISO27001/2 and PCI-DSS.
Ensure compliance with applicable laws, regulations, and standards (eg, GDPR, HIPAA, PCI-DSS, ISO 27001).
Monitor and report on compliance status to senior management.
Develop and deliver security awareness and training programs for employees.
Risk Assessment and Audits
Conduct regular risk assessments to identify potential security threats and vulnerabilities.
Perform vulnerability assessments and penetration tests of the platform.
Coordinate and support internal and external audits.
Conduct internal security assessments and prepare for external compliance audits.
Incident Response and Documentation
Assist in the development and implementation of incident response plans.
Investigate security incidents and breaches, and implement corrective measures.
Maintain comprehensive documentation of compliance efforts, including policies, procedures, and audit results.
Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
Security Engineering and Implementation
Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information.
Identify and define system security requirements.
Design computer security architecture and develop detailed cyber security designs.
Prepare and document standard operating procedures and protocols.
Technical Solutions Development
Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
Ensure that security controls are effective and aligned with compliance requirements.
Monitor and audit security controls regularly to ensure ongoing effectiveness.
FOR THIS EXCITING MISSION YOU ARE EQUIPPED WITH...
Bachelors degree from an accredited technical college or university or equivalent combination of education and experience.
Fluency in English, both spoken and written, is essential.
Compliance and Policy Management
Extensive experience in establishing, implementing, and maintaining an Information Security Management System (ISMS), particularly in alignment with ISO27001 standards.
Demonstrated ability to write, develop, and maintain comprehensive security policies and procedures.
Experience in defining and implementing security procedures in close collaboration with business departments to ensure alignment with organizational goals and compliance requirements.
Solid understanding of relevant standards and regulations such as GDPR, ISO27001, TISAX, SOC2/3 and PCI-DSS.
Experience in conducting risk assessments and managing security compliance efforts within an enterprise environment.
Technical Skills
Proven work experience as a System Security Engineer, Information Security Engineer, or similar role.
Detailed technical knowledge of database, operating system, and cloud security, with hands-on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content filtering.
Strong familiarity with network security and networking technologies, including experience with system, security, and network monitoring tools.
Thorough understanding of the latest security principles, techniques, and protocols.
Preferred Qualifications:
Professional certifications such as CISSP, CISA, CISM, or equivalent.
Experience in conducting security audits and assessments.
Knowledge of cloud security and compliance frameworks (eg, AWS, Azure).
Familiarity with security frameworks (eg, NIST, COBIT).
Experience with risk management and security assessment methodologies.
Soft skills
Strong organizational and project management skills.
Ability to work independently and as part of a team.
Attention to detail and a commitment to excellence.
Ability to stay current with the latest industry trends and technologies