Cloud Security and GRC Engineer

1 week ago

Pune India PeopleGene Full time

Job Description About the role: We are seeking a hands-on Security & Compliance Lead to own and execute end-to-end security audits and compliance initiatives across applications, infrastructure, and organizational processes. This role ensures systems, applications, and business operations are secure, compliant, and aligned with both internal policies and regulatory requirements (e.g., RBI, ISO 27001, SOC 2 Type II). Responsibilities: - Conduct technical assessments (e.g., VRA, security checklists) required by new BFSI clients. - Analyse and complete detailed cloud infrastructure security and compliance questionnaires. - Assist in mapping customer security and regulatory requirements (e.g., ISO 27001, RBI, SOC 2 type II) to internal controls. - Maintain documentation and templates for commonly requested BFSI assessment artifacts. - Manage and complete security questionnaires from clients, vendors, and partners. - Evaluate vendor security and compliance by reviewing their responses and - supporting documentation. - Identify security risks within the company's IT infrastructure, applications and services. - Ensure compliance with security standards such as ISO 27001, GDPR, SOC 2, or any other relevant frameworks. - Work with internal teams to maintain compliance with legal and regulatory requirements. - Collaborate with the IT security, legal, and procurement teams to address concerns identified in the security assessments. - Develop and maintain internal security policies and procedures related to vendor assessments and third-party risk management. - Prepare detailed reports summarizing findings from security assessments and risk analysis. - Provide recommendations to improve security measures and compliance. - Educate internal staff and external partners about security best practices and compliance requirements - Support pre-sales and onboarding teams with timely delivery of assessment documentation. - Stay updated with AWS best practices, shared responsibility model, and emerging cloud security trends. Good to Have: - Bachelor's degree in computer science, Information Security, Data Science, or a related field - 5+ years of experience working with Audit/compliance, application security assessments, AWS cloud security preferably BFSI domain - 2+ yrs. of experience on AWS cloud security and risk assessments. - Strong exposure to AWS cloud infrastructure (Guard Duty, security hub, inspector, Firewall, IAM, EC2, VPC, S3, Security Groups, etc.). - Familiarity with secure coding practices, vulnerability management, and threat modelling. - Experience with VRA templates, cloud security checklists, and assessment responses for enterprise or regulated clients. - Familiarity with information security standards such as ISO 27001, SOC 2, RBI cybersecurity framework. - Strong understanding of data protection, encryptions methodologies - Ability to interpret and explain security configurations and policies in layman's terms. - Experience with security controls, vulnerability scanning tools (e.g., Nessus, wire shark), or SIEM. - Exposure with security tools such as network firewall, IPS/IDS is plus

  • Security GRC Engineer

    2 days ago

    Bengaluru, India Docusign Full time

    Job Description Company Overview Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people's lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of...

  • Senior Security Engineer, GRC

    1 day ago

    India 6sense Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Our Mission: 6sense is on a mission to revolutionize how B2B organizations create revenue by predicting customers most likely to buy and recommending the best course of action to engage anonymous buying teams. 6sense Revenue AI is the only sales and marketing platform to unlock the ability to create, manage and convert high-quality pipeline to revenue. Our...

  • SAP Security GRC DevOps Analyst

    2 weeks ago

    Pune Cerebrum, India Johnson Controls Ltd Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    SAP Security GRC DevOps Analyst Position: SAP Security GRC DevOps Analyst Experience: 3+ years Job Summary: The SAP Security GRC DevOps Analyst will be responsible for implementation and management of security controls and governance, risk, and compliance (GRC) solutions within SAP environments. The candidate will work closely with cross-functional...

  • Cloud Security Validation Engineer

    4 days ago

    India Upwind Security Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With...

  • Contractor Security Engineer Level 3 – GRC Tech Solutions

    2 weeks ago

    India Mindlance Full time

    Remote Role | Contractor Security Engineer Level 3 – GRC Tech SolutionsWe’re looking for a Security Engineer with a tech-first mindset to help grow and enhance our Cybersecurity. This position focuses on enabling process clarity, automation, and efficiency while creating insights that empower our business for the future.As a Security Engineer supporting...

  • Contractor Security Engineer Level 3 – GRC Tech Solutions

    2 weeks ago

    India Mindlance Full time

    Remote Role | Contractor Security Engineer Level 3 – GRC Tech Solutions We’re looking for a Security Engineer with a tech-first mindset to help grow and enhance our Cybersecurity. This position focuses on enabling process clarity, automation, and efficiency while creating insights that empower our business for the future. As a Security Engineer...

  • Contractor Security Engineer Level 3 – GRC Tech Solutions

    2 weeks ago

    India Mindlance Full time

    Remote Role | Contractor Security Engineer Level 3 – GRC Tech Solutions We’re looking for a Security Engineer with a tech-first mindset to help grow and enhance our Cybersecurity . This position focuses on enabling process clarity, automation, and efficiency while creating insights that empower our business for the future. As a Security Engineer...

  • SAP Security GRC DevOps Analyst

    3 days ago

    Pune, Maharashtra, India Johnson Controls Full time ₹ 5,00,000 - ₹ 15,00,000 per year

    Position: SAP Security GRC DevOps AnalystExperience: 3+ yearsJob Summary:The SAP Security GRC DevOps Analyst will be responsible for implementation and management of security controls and governance, risk, and compliance (GRC) solutions within SAP environments. The candidate will work closely with cross-functional teams to ensure robust security practices...

  • SAP GRC Security Consultant

    2 days ago

    India Innoval Digital Solutions P Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    SAP GRC Security Consultant – 3-7 Years Job Description We are looking to hire an experienced SAP GRC Security Consultant Responsibilities & Skills: The SAP Security Architect/Consultant will be responsible for the overall design and approach to SAP security across all of our client's SAP systems, including development, BAU, handover and support (full...

  • Junior Cloud Security Validation Engineer

    3 days ago

    India Upwind Security Full time ₹ 5,00,000 - ₹ 15,00,000 per year

    Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With...