Job description

As a Lead Product Security Engineer, the main responsibilities include assessing applications and products for security vulnerabilities, interacting with project teams for security requirements, and conducting various security assessments and testing. The role requires proficiency in security best practices, passion for learning multiple areas of security, and an ability to automate repeatable tasks.

Responsibility

• Policy Development and Enforcement
• Risk Assessment and Management
• Compliance Checks
• Compliance Reporting
• Data Loss Prevention (DLP) and CASB
• SDLC Risk Assessment
• Risk Register Management
• Third-Party Risk Management
• Security Control Automation
• Audit Representation
• Security Awareness

Qualifications

• Bachelor’s degree in information technology or related field
• 4-5 years of professional experience in information security
• 2 years specializing in Governance, Risk, and Compliance (GRC) domains
• Experience in managing SEBI, RBI, and IRDAI compliance and audits
• Proficiency in security policy management
• Deep understanding of security standards and frameworks
• Knowledge of operational and organizational structures
• Strong understanding of core security principles
• Familiarity with agile methodologies
• Experience in DevOps or DevSecOps practices
• Information security certifications (CISSP, CISM, CRISC, CEH, ISO 27001)
• Experience in reviewing High-Level Design (HLD) and Low-Level Design (LLD)