Cyber Security Engineer – ISO 27001 & Regulatory Compliance

About the role

We are seeking a Cyber Security Engineer to strengthen our information security governance, risk management and compliance framework. The role focuses on ISO 27001 implementation, Indian data protection and financial regulations, and UIDAI Sub‑AUA/KUA requirements.

Key responsibilities

• Conduct internal information security and compliance audits.
• Support ISO 27001 implementation, maintenance and ongoing compliance activities.
• Review and assess adherence to DPDPA, RBI guidelines and UIDAI Sub‑AUA/KUA requirements.
• Perform risk, gap and control assessments across applications, APIs and infrastructure.
• Develop, review and maintain security policies, procedures and standards.
• Coordinate with business and technology teams for remediation and compliance actions.
• Assist in vendor security assessments and regulatory audit preparation.
• Prepare audit reports, risk registers and compliance documentation.

Required profile

• 1‑2 years of experience in cyber security, IT audit, risk or compliance.
• Basic networking knowledge (TCP/IP, DNS, firewall, VPN, network segmentation).
• Good documentation, reporting and communication skills.

Required skills

• Knowledge of ISO 27001, ISMS and information security controls.
• Understanding of DPDPA, RBI IT and cybersecurity guidelines, and UIDAI Sub‑AUA/KUA compliance.
• Experience conducting internal audits and compliance assessments.
• Familiarity with VAPT, OWASP Top 10 and security testing concepts.