Senior Security Engineer - GRC

About the role

We're looking for an experienced GRC professional to build and scale our governance, risk, and compliance function. As a fintech infrastructure provider processing sensitive financial data on behalf of banks and NBFCs, we operate under significant regulatory scrutiny - this role will own the frameworks, certifications, and controls that keep Vegapay compliant, secure, and trusted by our regulated BFSI partners.

What you'll do

• Work closely with Security, Engineering, Legal, Product, and leadership to embed governance and risk management into how we build and operate
• Design, implement, and maintain information security and compliance policies, standards, and procedures aligned to ISO 27001, SOC 2, PCI-DSS, and RBI guidelines
• Establish and run governance forums (risk council, policy reviews) with leadership and cross-functional stakeholders
• Own and maintain the organization’s risk register, control framework, and compliance calendar
• Conduct periodic enterprise and IT risk assessments, identifying gaps and driving remediation with process and engineering owners

What you need

• 6–11 yrs of experience
• ISO 27001
• CISA
• CISSP
• CISM
• Cloud security
• Risk management
• B.Tech or B.E. or BBA

Good to have

• Due diligence
• Data privacy
• AWS
• GCP