Security & Compliance Engineer

Accountabilities:: Provide first-response and operational support for information security incidents, including containment, escalation, response, and recovery activities. Develop, maintain, and continuously improve security incident response runbooks, procedures, and operational processes. Coordinate with SOC, MDR, and managed security service teams to investigate, contain, and resolve security incidents. Support incident investigations, documentation, root-cause analysis, post-incident reviews, and remediation tracking. Monitor and track security incidents, actions, escalations, remediation activities, and resolution status. Support ISO 27001 information security management and compliance activities, including security controls and documentation. Contribute to PDPL compliance initiatives, assessments, security controls, and related documentation. Support information classification, handling requirements, records management, and broader information governance processes. Coordinate internal and external security audits and provide accurate evidence and supporting documentation. Maintain security risk registers and track risk mitigation and remediation activities. Prepare monthly security metrics, dashboards, management reports, and governance updates. Support periodic security and governance reviews, including Y1.2 reviews and related assessment activities. Administer and support BeyondTrust Privileged Access Management (PAM), including privileged access reviews and governance. Review privileged access, access controls, approvals, and associated security requirements. Coordinate security initiatives with governance, compliance, IT, security, and business stakeholders. Support security control assessments, compliance reviews, and remediation tracking. Maintain accurate security policies, procedures, records, audit evidence, and governance documentation. Identify opportunities to strengthen security operations, incident readiness, information governance, and compliance processes. Requirements: 5+ years of professional experience in IT security, information security, cybersecurity, security governance, compliance, or a related field. 3+ years of hands-on experience in incident response and security operations. 2+ years of experience working with ISO 27001 and PDPL compliance or comparable information-security regulatory frameworks. 2+ years of experience in information governance, including information classification and records management. Strong understanding of security incident response, including containment, escalation, investigation, recovery, and post-incident activities. Experience developing and maintaining incident response runbooks, procedures, and operational documentation. Experience coordinating with SOC, MDR, or managed security service providers. Hands-on experience administering BeyondTrust Privileged Access Management (PAM). Strong understanding of privileged access management, access governance, and security controls. Experience maintaining security risk registers, supporting risk assessments, and tracking remediation activities. Experience preparing security metrics, management reports, audit evidence, compliance documentation, and governance reports. Strong knowledge of ISO 27001, information security governance, risk management, and audit processes. Practical knowledge of PDPL requirements and information governance principles. Strong coordination and stakeholder-management skills, with the ability to collaborate across security, governance, compliance, IT, and business functions. Excellent written and verbal communication skills. Strong analytical, documentation, problem-solving, and organizational abilities. Ability to work independently in a remote environment while managing multiple security and compliance priorities. Benefits: Salary range of INR 10–20 LPA (approximately ₹1,000,000–₹2,000,000 per year ). Full-time employment. Fully remote position based in India. Opportunity to work across information security operations, incident response, compliance, governance, and risk management. Exposure to security frameworks and regulatory requirements including ISO 27001 and PDPL. Opportunity to work with privileged access management and security operations technologies. Cross-functional collaboration with security, IT, governance, compliance, and business teams. Opportunity to contribute to security process improvements, incident readiness, and scalable governance practices.