Information Security-Lead

About Capillary

Capillary offers an Intelligent Customer Engagement platform to retailers and consumer businesses managing the entire life cycle of customer data from acquisition, analysis, insights, and activations. Over 400 marquee brands across 30+ countries, including global conglomerates like Tata, Shell, VF Brands, Walmart, Al-Futtaim, KFC, Starbucks, Madura Garments, and Landmark Group, trust Capillary to enable easy and seamless consumer experiences. With over 600 million consumers and 50000 stores on the platform, Capillary is Asiaʼs leading SaaS Product Company. Over 500 Capillary associates across 14 global offices are continually innovating to find new ways for brands to make their consumersʼ lives easier and experiences memorable. Capillary is backed by Warburg Pincus, Sequoia Capital, Norwest Venture Partners, Qualcomm Ventures, and American Express Ventures.

Capillaryʼs tech stack is always at the forefront of cutting-edge technologies that work at a huge scale.

Job Description

We are looking for an experienced Information security lead to augment our infosec team to lead our Internal Security Assurance program while driving key Security Operations initiatives. The ideal candidate will have strong experience planning and leading internal audits against industry standards and regulations, along with hands-on experience managing operational security programs such as vulnerability management, incident response, security monitoring, and risk remediation.

What you'll do

• Develop and execute information security internal audit program based on applicable regulatory, industry standard frameworks
• Lead end-to-end internal audits across technology, cloud infrastructure, applications, and business processes.
• Present audit findings, risk ratings, and recommendations & work with respective stakeholders to remediate them
• Support external certification and customer audits
• Continuously improve internal audit methodologies, checklists, and testing procedures.
• Should lead the security operation initiatives like vulnerability management, security incident response, alert monitoring, etc.
• Develop security metrics and dashboards.

What are we looking for

• 8+ years experience in information security domain with at least 3 years leading an internal audit & 2 years leading security operations in a SaaS based env
• Should have led the entire cycle of risk management from identifying to remediation of risks
• Should have thorough knowledge of cloud computing and their intricacies with respect to information security and privacy principles
• Should have in depth knowledge in either vulnerability management, security incident response or security operations or all
• CISM or CISA or any leading industry certification a plus