Accountabilities

Conduct security control testing and evaluations to assess design and operational effectiveness across technical, physical, and organizational controls.

Assess controls against industry frameworks and standards, including SOC 2, ISO 27001, and PCI DSS.

Coordinate sampling populations and lead technical walkthroughs with Engineering, DevOps, IT, and system owners.

Review technical documentation and evidence to verify control implementation and effectiveness.

Identify control gaps, assess associated risks, and document exceptions and recurring trends in the Governance, Risk, and Compliance (GRC) platform.

Collaborate with system owners and relevant stakeholders to develop practical, actionable remediation plans.

Support internal and third-party audits by coordinating evidence collection and explaining technical controls to auditors.

Help manage audit activities while minimizing disruption to engineering and business operations.

Contribute to improving compliance processes through automation and effective use of GRC tools.

Work with Security Compliance colleagues and cross-functional teams to strengthen ongoing compliance operations and security practices.

Requirements

2–6 years of relevant professional experience, supported by equivalent qualifications and applicable experience.

Practical experience evaluating security controls against recognized industry standards, particularly SOC 2, ISO 27001, or PCI DSS.

Strong understanding of technical security controls, including Identity and Access Management (IAM), Change Management, Vulnerability Management, and Logging and Monitoring.

Ability to review technical evidence, identify control weaknesses, assess risks, and support remediation activities.

Strong analytical and problem-solving skills, with excellent attention to detail.

Effective written and verbal communication skills, including the ability to explain technical controls and compliance requirements to different stakeholders.

Ability to collaborate with engineering, infrastructure, IT, and business teams in a cross-functional environment.

Nice to have: Relevant security or audit certifications such as CISA, CRISC, Security+, CISM, or ISO Lead Auditor.

Nice to have: Experience with cloud infrastructure, containerized environments, or distributed systems.

Benefits

Remote working arrangement in India.

Flexible working approach, with the option to work from home, from an office, or through a combination of both, depending on role needs.

Benefits supporting employee health, well-being, financial security, and life beyond work.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1