Senior Security Engineer - GRC
BengaluruFull-time6–11 yrsPosted over a month ago
Senior cybersecurity role at Vegapay Technology in Bengaluru. Needs 6+ years and a B.Tech, B.E. or BBA.
About the role
We're looking for an experienced GRC professional to build and scale our governance, risk, and compliance function. As a fintech infrastructure provider processing sensitive financial data on behalf of banks and NBFCs, we operate under significant regulatory scrutiny - this role will own the frameworks, certifications, and controls that keep Vegapay compliant, secure, and trusted by our regulated BFSI partners.
What you'll do
- Work closely with Security, Engineering, Legal, Product, and leadership to embed governance and risk management into how we build and operate
- Design, implement, and maintain information security and compliance policies, standards, and procedures aligned to ISO 27001, SOC 2, PCI-DSS, and RBI guidelines
- Establish and run governance forums (risk council, policy reviews) with leadership and cross-functional stakeholders
- Own and maintain the organization’s risk register, control framework, and compliance calendar
- Conduct periodic enterprise and IT risk assessments, identifying gaps and driving remediation with process and engineering owners
What you need
- ISO 27001
- CISA
- CISSP
- CISM
- Cloud security
- Risk management
Good to have
- Due diligence
- Data privacy
- AWS
- GCP