Senior Information Security Engineer

Responsibilities

• Interpret and implement cybersecurity regulations from RBI, IRDAI, and SEBI
• Define, implement, and manage information security principles, policies, and frameworks
• Conduct Technology Risk Assessments and VAPTs, recommending mitigation strategies
• Ensure organizational readiness for internal and external audits
• Conduct security awareness programs and phishing simulation exercises
• Perform Third Party Risk Assessments and vendor assessments
• Review security controls for cloud (AWS, Google, Azure), data centers, and application architecture
• Identify and define Security KPIs and maintain security dashboards
• Manage security tools including SIEM, DLP, and EDR
• Drive end-to-end VAPT engagements for Web, Mobile, and Infrastructure
• Maintain a security risk register and track identified risks

Requirements

• 3-5 years of experience in information security or cybersecurity
• Experience with frameworks such as ISO 27001, NIST SP 800-37, or MITRE ATT&CK
• Sound knowledge of security vulnerabilities, remediation, and mitigation techniques
• Understanding of OWASP Top 10 vulnerabilities and defensive techniques
• Familiarity with Docker, Kubernetes, and public cloud security models
• Experience in the Fintech or Startup industry preferred
• Knowledge of regulatory compliances like PCI DSS, RBI Master Directives, IRDA, or SEBI
• Excellent verbal and written communication skills

Preferred Qualifications

• Certifications such as ISO 27001, CISM, or CISSP

About the Company

InCred is a new-age financial services group that leverages technology and data science to make lending quick, simple, and hassle-free through products like personal, student, and business loans.