Lentra - Associate/Information Security Analyst (2-5 yrs)

About Lentra :

Lentra is a new-age, domain-native platform built to empower financial institutions with tomorrow's lending ecosystem, today. Our full-stack, fully digital, and secure products and solutions represent the future of smart, seamless, and secure digital lending.

We provide comprehensive solutions for the Indian lending stack, including digital origination with features like eKYC, vKYC, eSign, eNACH, and more. Our platform is designed to enhance reliability and reduce TATs for financial institutions.

Key Products :

Digital Loan Origination System (LOS) : A digitized application form leveraging AI to facilitate credit decisions in less than 10 seconds, achieving over 70% straight-through decisions with in-built rule engines and 3rd party API interfaces.

BREx : A configurable Business Rule Engine (BRE) for accelerated and automated lending decisions.

MultiBureau : A neutral service provider connecting to all four credit bureaus with built-in rule tree logic.

GoGetr : An interface that integrates various third-party vendors for data like MCA, Aadhaar eKYC, PAN, Fraud Checks, and Bank Statement Analysis, ensuring easy vendor switching and standardisation.

Skills :

- Bachelor's engineering degree, BCA with specialisation in Information Security, Cybersecurity, or related.

- Contribute in drafting and updating Information Security policies and process documents.

- Familiarity with ISO 27001 : 2022, SOC 2 Type II and experience in handling audits and third-party risk management.

- Analyse Web, Mobile, and API application security assessments.

- Good knowledge of security technologies for secure software development such as cryptography, authentication techniques, and protocols.

- Good knowledge in TCP/IP protocols and deeper knowledge of application layer protocols like HTTP, FTP, DNS.

- Cloud security concepts and virtualisation basics would be an addition.

- Strong communication and presentation skills.

Solid understanding of the following required :

- OWASP Top 10 Web

- OWASP Top 10 Mobile

- OWASP Top 10 API

- Linux/Unix Operating Systems

- SDLC Processes

- Computer Networking

Mandatory certifications (at least 1) :

- ISO 27001 LI/LA Certification/CISA

- CEH

- Relevant certifications directly from AWS, GCP or Azure

Good to have : CCSE, CCSP, cloud security certification