Information Security & Compliance

Role Objective

We are looking for a proactive InfoSec Associate to support our compliance and audit functions. You will play a key role in maintaining our ISO standards, handling vendor security assessments, and ensuring our documentation is audit-ready for our banking and NBFC clients.

Key Responsibilities

• Audit Support: Assist in internal and external audits for ISO 27001, SOC2, and ISO 27701 .
• Vendor Compliance: Independently handle and respond to detailed Vendor Security Questionnaires from banks and NBFCs.
• Evidence Management: Collect, organize, and present technical audit evidence from engineering and IT teams.
• Policy & Documentation: Help draft and review Security Policies, SOPs, and ISMS documentation.
• Risk Tracking: Track audit observations and manage the Corrective Action Plan (CAPA) to ensure timely remediation.
• Data Privacy: Assist in aligning internal processes with the DPDP Act and GDPR requirements.

Required Skills & Competencies

• Framework Knowledge: Basic understanding of ISO 27001 and Risk Assessment principles.
• Technical Literacy: Ability to understand AWS/Azure cloud security settings from a compliance standpoint.
• Documentation: High proficiency in organizing audit trails and drafting professional security reports.
• Communication: Comfortable interacting with external auditors and internal technical teams.

Preferred Certifications (Good to Have)

• ISO 27001 Internal Auditor
• CompTIA Security+
• CISA (In-progress/Foundation)