Security & Compliance Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security & Compliance Engineer based in India.

We are looking for an experienced security professional to strengthen information security operations, compliance, governance, and risk management initiatives.
The role combines hands-on incident response with broader responsibilities across security governance, information management, and regulatory compliance.
You will help maintain a strong security posture by responding to incidents, coordinating investigations, and improving security processes and controls.
You will also contribute to ISO 27001 and PDPL compliance, audits, risk assessments, and information governance activities.
The position provides an opportunity to work closely with SOC/MDR, IT, governance, compliance, and business teams in a collaborative environment.
You will have an important role in strengthening incident readiness, privileged access governance, and security documentation and reporting.
This is a full-time remote opportunity for a security professional with 5+ years of relevant experience.

• Provide first-response and operational support for information security incidents, including containment, escalation, response, and recovery activities.
• Develop, maintain, and continuously improve security incident response runbooks, procedures, and operational processes.
• Coordinate with SOC, MDR, and managed security service teams to investigate, contain, and resolve security incidents.
• Support incident investigations, documentation, root-cause analysis, post-incident reviews, and remediation tracking.
• Monitor and track security incidents, actions, escalations, remediation activities, and resolution status.
• Support ISO 27001 information security management and compliance activities, including security controls and documentation.
• Contribute to PDPL compliance initiatives, assessments, security controls, and related documentation.
• Support information classification, handling requirements, records management, and broader information governance processes.
• Coordinate internal and external security audits and provide accurate evidence and supporting documentation.
• Maintain security risk registers and track risk mitigation and remediation activities.
• Prepare monthly security metrics, dashboards, management reports, and governance updates.
• Support periodic security and governance reviews, including Y1.2 reviews and related assessment activities.
• Administer and support BeyondTrust Privileged Access Management (PAM), including privileged access reviews and governance.
• Review privileged access, access controls, approvals, and associated security requirements.
• Coordinate security initiatives with governance, compliance, IT, security, and business stakeholders.
• Support security control assessments, compliance reviews, and remediation tracking.
• Maintain accurate security policies, procedures, records, audit evidence, and governance documentation.
• Identify opportunities to strengthen security operations, incident readiness, information governance, and compliance processes.

Requirements:

• 5+ years of professional experience in IT security, information security, cybersecurity, security governance, compliance, or a related field.
• 3+ years of hands-on experience in incident response and security operations.
• 2+ years of experience working with ISO 27001 and PDPL compliance or comparable information-security regulatory frameworks.
• 2+ years of experience in information governance, including information classification and records management.
• Strong understanding of security incident response, including containment, escalation, investigation, recovery, and post-incident activities.
• Experience developing and maintaining incident response runbooks, procedures, and operational documentation.
• Experience coordinating with SOC, MDR, or managed security service providers.
• Hands-on experience administering BeyondTrust Privileged Access Management (PAM).
• Strong understanding of privileged access management, access governance, and security controls.
• Experience maintaining security risk registers, supporting risk assessments, and tracking remediation activities.
• Experience preparing security metrics, management reports, audit evidence, compliance documentation, and governance reports.
• Strong knowledge of ISO 27001, information security governance, risk management, and audit processes.
• Practical knowledge of PDPL requirements and information governance principles.
• Strong coordination and stakeholder-management skills, with the ability to collaborate across security, governance, compliance, IT, and business functions.
• Excellent written and verbal communication skills.
• Strong analytical, documentation, problem-solving, and organizational abilities.
• Ability to work independently in a remote environment while managing multiple security and compliance priorities.

Benefits:

• Salary range of INR 10–20 LPA (approximately ₹1,000,000–₹2,000,000 per year).
• Full-time employment.
• Fully remote position based in India.
• Opportunity to work across information security operations, incident response, compliance, governance, and risk management.
• Exposure to security frameworks and regulatory requirements including ISO 27001 and PDPL.
• Opportunity to work with privileged access management and security operations technologies.
• Cross-functional collaboration with security, IT, governance, compliance, and business teams.
• Opportunity to contribute to security process improvements, incident readiness, and scalable governance practices.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1