Cyber Security Engineer

We are looking for a Cyber Security Engineer to support information security governance, risk management, compliance, and audit activities. The candidate should have knowledge of ISO 27001, DPDPA, RBI regulatory requirements, and UIDAI Sub-AUA/KUA guidelines.

Key Responsibilities

• Conduct internal information security and compliance audits
• Support ISO 27001 implementation, maintenance, and compliance activities
• Review and assess compliance with DPDPA, RBI guidelines, and UIDAI requirements
• Perform risk assessments, gap assessments, and control reviews
• Develop, review, and maintain information security policies, procedures, and standards
• Coordinate with business and technology teams for compliance and remediation activities
• Assist in vendor security assessments and regulatory audits
• Perform basic security reviews and vulnerability assessments of applications, APIs, and infrastructure
• Prepare audit reports, risk registers, and compliance documentation

Required Skills

• Knowledge of ISO 27001, ISMS, and information security controls
• Understanding of DPDPA, RBI IT and cybersecurity guidelines, and UIDAI Sub-AUA/KUA compliance requirements
• Experience in conducting internal audits and compliance assessments
• Basic networking knowledge (TCP/IP, DNS, Firewall, VPN, Network Segmentation).Basic understanding of VAPT, OWASP Top 10, and security testing concepts
• Good documentation, reporting, and communication skills
• 2 -5 years of experience in Cyber Security, IT Audit, Risk, or Compliance roles