Information Security Lead

About the role

RoboMQ is seeking an Information Security Lead to shape and drive its security strategy across product, infrastructure and operations. The role will champion a zero-trust culture, protect the Hire2Retire platform and ensure compliance with industry standards.

Key responsibilities

• Define and enforce secure SDLC practices, including threat modeling, secure code reviews and integration of SAST and DAST tools into CI/CD pipelines.
• Own the full vulnerability management lifecycle, design risk assessment methods, track remediation and coordinate patching for applications and infrastructure.
• Perform hands-on security assessments using tools such as Nmap, OWASP ZAP and commercial scanners.
• Secure cloud-native AWS environments and design network security architectures (firewalls, micro-segmentation, IDS/IPS, WAF) to manage the external attack surface.
• Implement and maintain security controls aligned with SOC 2, HIPAA and other regulatory frameworks.
• Develop, publish and enforce enterprise-wide security policies, standards and procedures.
• Lead third-party risk management, creating assessment frameworks for SaaS integrations and supply-chain vendors.
• Coordinate incident response, acting as the primary liaison between engineering, DevOps and leadership.

Required profile

• 5+ years of experience in cyber security, information security or application security.
• Technical degree (B.Tech/B.E.) from a premier engineering institute.
• Proven track record leading security initiatives across engineering, operations and infrastructure teams.
• Strong stakeholder management, communication and leadership abilities.
• Ownership mindset to embed zero-trust principles organization-wide.

Required skills

• AWS cloud security
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Nmap
• OWASP ZAP
• Firewalls, micro-segmentation, IDS/IPS, Web Application Firewalls (WAF)
• SOC 2 compliance
• HIPAA compliance