Senior Infosec Engineer
- NS, Canada
- Richmond Road, NS, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- 7-10 years of experience, including being SPOC for Infosec audits
- Posting language
- English
- Posted
Original job description
At Zerodha Fund House, we are enabling the next generation of Indian investors. We think the mutual fund needs to be re-imagined as a product: simple, transparent, and relevant enough to bring the next 10 crore Indians into the capital markets. We are building the founding team and are looking for smart, passionate people to join us.
We are looking for a Senior Security Engineer to own security at ZFH. This is a foundational role. You will be the person who defines what security means here, sets the standards the rest of engineering builds against, and grows the function (and eventually the team) as we scale.
Key Responsibilities
We are looking for a Senior Security Engineer to own security at ZFH. This is a foundational role. You will be the person who defines what security means here, sets the standards the rest of engineering builds against, and grows the function (and eventually the team) as we scale.
Key Responsibilities
- Draft, coordinate & monitor IT processes & policies to ensure compliance as per IT Act, regulatory bodies (e.g. SEBI - preferred, RBI, GDPR, UIDAI etc.), info security (ISM) guidelines and other applicable laws with respect to Technology, in coordination with internal & external stakeholders
- Prepare & update business-wise IT inventory and critical softwares required by the Compliance/Legal teams for regulatory filings and 3rd party audits
- Conduct vendor risk assessment & ensure identified gaps are proactively filled
- Introduce new processes & policies by studying new regulations, market studies and surveys relevant to our business
- Plan, formulate, coordinate, implement & monitor the cyber crisis management plan (CCMP)
- Incident Management, resolution and reporting
- Interface with external auditors and set up processes to ensure all Infosec audits go smoothly
- Formulate, implement, review & monitor BCP
- 7-10 years of experience, including being SPOC for Infosec audits
- In-depth knowledge of technology, security, risk and compliance best practices
- Understanding of SEBI CSCRF, SAR, Cloud Adoption frameworks
- Strong capability in interfacing with technology, business teams, board members and external vendors
- Detailed understanding of security monitoring, threat intelligence & vulnerability management
- A self-driven attitude with a strong sense of ownership
- Experience with SEBI (preferred) and/or RBI audits is a big plus
- Assisting the team to conduct Technology Committee
- Assisting the Risk Officer to conduct independent assessments of the business functions
- Provide timely data for Risk Management Committee
More about this job
Responsibilities
Own and develop the organization’s information security function, including IT policies, regulatory compliance, security audits, vendor risk assessments, and incident response. Establish and monitor cyber crisis management and business continuity plans, and support technology and risk committees with assessments and reporting.
Requirements
Requires 7–10 years of experience, including serving as the point of contact for information security audits, and strong knowledge of technology security, risk, and compliance practices. Candidates should understand SEBI CSCRF, SAR, and cloud adoption frameworks, and be able to work effectively with technology and business teams, board members, auditors, and vendors; SEBI or RBI audit experience is preferred.
Skills
- Information Security
- IT Compliance
- Regulatory Compliance
- Security Audits
- Vendor Risk Assessment
- Cyber Crisis Management
- Incident Management
- Business Continuity Planning
- Security Monitoring
- Threat Intelligence
- Vulnerability Management
- Risk Management
- Stakeholder Management
- IT Policy Development
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Finance & Accounting
- Management & Leadership
Keywords
- Information Security
- IT Act
- SEBI
- RBI
- GDPR
- UIDAI
- Information Security Management
- Regulatory Compliance
- IT Inventory
- Third-Party Audits
- Vendor Risk Assessment
- Cyber Crisis Management Plan
- Incident Management
- Security Audits
- Business Continuity Planning
- SEBI CSCRF
- SAR
- Cloud Adoption Frameworks
- Security Monitoring
- Threat Intelligence
- Vulnerability Management
- Risk Management Committee
- Technology Committee