Cyber Security Engineer

About the role

We are seeking a Cyber Security Engineer to strengthen our information security governance, risk management, compliance, and audit functions. The role focuses on implementing and maintaining ISO 27001, as well as ensuring adherence to DPDPA, RBI, and UIDAI Sub‑AUA/KUA regulations.

Key responsibilities

• Conduct internal information security and compliance audits.
• Support ISO 27001 implementation, maintenance, and ongoing compliance activities.
• Review and assess compliance with DPDPA, RBI guidelines, and UIDAI requirements.
• Perform risk assessments, gap analyses, and control reviews.
• Develop, review, and maintain security policies, procedures, and standards.
• Coordinate with business and technology teams for remediation and compliance actions.
• Assist in vendor security assessments and regulatory audits.
• Execute basic security reviews and vulnerability assessments of applications, APIs, and infrastructure.
• Prepare audit reports, risk registers, and compliance documentation.

Required profile

• 2‑5 years of experience in cyber security, IT audit, risk, or compliance roles.
• Strong documentation, reporting, and communication abilities.

Required skills

• Knowledge of ISO 27001, ISMS, and information security controls.
• Understanding of DPDPA, RBI IT and cybersecurity guidelines, and UIDAI Sub‑AUA/KUA compliance.
• Experience conducting internal audits and compliance assessments.
• Basic networking knowledge (TCP/IP, DNS, firewall, VPN, network segmentation).
• Familiarity with VAPT, OWASP Top 10, and security testing concepts.