Cybersecurity

Job Summary

We are looking for a Senior Compliance Analyst to manage and support cybersecurity compliance, GRC, risk assessments, audits, and client engagements. The candidate will evaluate security controls, identify compliance gaps, review evidence, and provide practical recommendations.

Key Responsibilities

• Conduct Compliance Audits, Gap Assessments, and Risk Assessments.
• Assess controls against ISO 27001, SOC 2, PCI DSS, ISO 27701, ISO 42001, HIPAA, GDPR, DPDP, etc.
• Review policies, procedures, controls, and audit evidence.
• Identify gaps, risks, observations, and recommend remediation.
• Prepare Risk Registers, SoA, Control Matrices, Audit Reports, and Compliance Reports.
• Support clients during certification, surveillance, and external audits.
• Conduct client meetings, interviews, and control walkthroughs.
• Coordinate evidence collection and remediation tracking.
• Develop and review information security policies and procedures.
• Stay updated with cybersecurity standards, regulations, and best practices.

Required Skills

• Strong understanding of Information Security, GRC, Risk & Compliance.
• Good knowledge of ISO 27001:2022 and SOC 2.
• Understanding of cybersecurity controls, IT infrastructure, cloud security, IAM, vulnerability management, and security operations.
• Strong analytical, documentation, communication, and report-writing skills.
• Ability to independently manage client engagements.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
• 2–6 years of relevant experience in GRC, IT Audit, Cybersecurity Compliance, or Consulting.
• Certifications such as ISO 27001 LA/LI, CISA, CISSP, CRISC, or relevant GRC certifications are preferred.

IT Compliance Manager – Web3 & Digital Assets

📍 Location: Dubai, UAE

💼 Employment Type: Full-Time

🏢 Department: Technology / Compliance

📊 Experience: 5+ Years

🌐 Industry: FinTech / Web3 / Digital Assets

About the Role

We are looking for an experienced IT Compliance Manager – Web3 & Digital Assets to lead technology compliance, IT governance, risk management, and cybersecurity controls within a regulated FinTech and digital-asset environment.

The ideal candidate will have strong experience in IT GRC, technology risk, cybersecurity governance, Web3/blockchain, digital assets, and regulatory compliance, with UAE regulatory experience being highly preferred.

Key Responsibilities

• Manage IT governance, compliance frameworks, policies, procedures, and technology risk assessments.
• Support compliance with UAE virtual asset and financial-services regulations, including VARA, DFSA, FSRA, and UAE Central Bank requirements, where applicable.
• Assess technology risks across blockchain infrastructure, crypto wallets, custody, APIs, cloud platforms, databases, smart contracts, and dApps.
• Review controls related to crypto deposits, withdrawals, transfers, wallet operations, and transaction monitoring.
• Develop and monitor controls aligned with ISO 27001, SOC 2, NIST, PCI DSS, and relevant regulatory requirements.
• Coordinate IT audits, regulatory audits, compliance assessments, evidence collection, and remediation activities.
• Maintain technology risk registers, control assessments, compliance reports, and management dashboards.
• Partner with Engineering, Product, Security, Legal, Risk, AML/KYC, Finance, and Operations teams.
• Embed compliance and technology-risk requirements into product development, system changes, and technology architecture.
• Support regulatory licensing, assessments, and ongoing compliance requirements for digital-asset services.

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, Finance, Risk Management, or a related discipline.
• 5+ years of experience in IT Compliance, IT GRC, Technology Risk, Cybersecurity Governance, or a related field.
• Experience in FinTech, banking, payments, cryptocurrency, blockchain, digital assets, or financial services.
• Strong understanding of Web3, blockchain networks, crypto wallets, digital-asset transactions, custody, and smart-contract risks.
• Hands-on experience with IT governance, risk assessments, control testing, audits, and compliance frameworks.
• Strong knowledge of ISO 27001, SOC 2, NIST, PCI DSS, ITGC, or similar frameworks.
• Experience working with auditors, regulators, and cross-functional technology teams.
• Strong analytical, documentation, communication, and stakeholder-management skills.

UAE / Web3 Experience – Preferred

• Experience with VARA, DFSA, FSRA, UAE Central Bank, or other UAE financial regulators.
• Experience supporting VASP licensing or regulatory approvals.
• Previous experience in crypto exchanges, digital-asset platforms, blockchain companies, Web3 startups, or FinTech organizations.
• Understanding of AML/KYC, transaction monitoring, custody, wallet security, and digital-asset controls.

Preferred Certifications

• CISA
• CISM
• CISSP
• CRISC
• ISO 27001 Lead Auditor / Lead Implementer
• CAMS

Key Skills

IT GRC | IT Compliance | Technology Risk | Web3 Governance | Blockchain Risk | Digital Asset Compliance | VASP Licensing | UAE Regulatory Compliance | ITGC | Cybersecurity Governance | ISO 27001 | SOC 2 | NIST | PCI DSS | IT Audit | Risk Assessment | Crypto Transaction Monitoring | Stakeholder Management

We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the

design, implementation, and maintenance of our ISO 27001 Information Security Management

System (ISMS). This is a hands-on leadership role responsible for establishing a robust security

governance framework, achieving ISO 27001 certification, and embedding a culture of

continuous security improvement across the organization.

Key Responsibilities

● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation

from gap analysis through to successful Stage 1 and Stage 2 certification audits;

manage external auditor relationships

● Risk Management: Develop and operationalize the information security risk

management framework; conduct risk assessments, treatment planning, and risk

acceptance processes.

● Policy & Governance : Author, approve, and maintain the Statement of Applicability

(SoA), information security policies, standards, and procedures aligned with ISO 27001

Annex A controls.

● Control Implementation: Translate ISO 27001 Annex A controls into operational

security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to

implement and validate controls.

● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and

KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective

actions.

● Third-Party Risk: Oversee vendor security assessments and ensure supply chain

security controls meet organizational and ISO 27001 standards.

● Stakeholder Management: Report ISMS performance, risks, and compliance status to

senior leadership and the board; act as primary liaison for external auditors and

regulators.

Required Qualifications

● 5+ years of experience in information security governance, risk, and compliance

● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap

analysis → certification)

● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS

documentation requirements

● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,

OCTAVE, FAIR)

● Familiarity with internal audit practices and managing external certification bodies

● Excellent stakeholder management and ability to influence across technical and non-

technical teams

● Strong documentation and communication skills — able to translate complex standards

into actionable guidance

Preferred Qualifications

● Experience implementing ISMS in fintech, healthcare, or regulated industries

● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks

● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments

● Knowledge of automation for compliance evidence collection and control testing

● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead

Implementer

Why Join Us

● Opportunity to build the security governance function from the ground up

● High-visibility role with direct impact on customer trust and market differentiation

● Collaborative environment that values security as a business enabler, not a blocker

Company Profile:

We are a one-stop financial services shop, widely known for quality of its advice, personalized

service and cutting-edge technology. We started our journey in 2008. Currently we are serving

more than 50,000 investors with a team of 100 members. Our core product offering is mutual

fund, FD, Govt. Bonds, Debenture, etc.

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

Years of Exp: 5 to 8 Years (Relevant 5+ Years)

Location: Hyderabad

Notice Period: Immediate to 20 days

Offshore: Data Governance Analyst

Position Summary

Execute day-to-day Data Governance activities for RTB initiatives under the direction of the Onshore Lead. The role will focus on producing accurate, complete, and traceable governance artifacts that support enterprise standards, control requirements, and audit readiness.

Key Responsibilities

Register and maintain data assets, reports, and data products in Collibra and Data Marketplace.

Capture and validate business, technical, and operational metadata.

Document end-to-end data lineage, including sources, targets, transformations, and data movement.

Support business glossary, data classification, ownership, stewardship, and authoritative source documentation.

Assist with data quality rule documentation, issue tracking, and remediation follow-up.

Coordinate with data owners, engineers, architects, and application teams to resolve documentation gaps.

Maintain governance evidence, decisions, status reports, and action items.

Track work through Jira and escalate blockers promptly to the Onshore Lead.

Support multiple RTB workstreams while meeting established quality and delivery expectations.

Required Qualifications

Experience in Data Governance, Data Management, metadata management, lineage, or data quality.

Working knowledge of Collibra or a comparable governance platform.

Understanding of data warehousing, data modeling, ETL/data pipelines, and system-to-system data flows.

SQL proficiency and familiarity with cloud data platforms, preferably Snowflake.

Strong analytical, documentation, communication, and organizational skills.

Ability to work effectively in an onshore-offshore delivery model.

Preferred Qualifications

Experience with Collibra or similar Data Governance Platforms, Jira, Confluence, Cloud Data Solutions, Excel

Financial-services or regulated-industry experience.

Familiarity with Agile delivery and audit or regulatory documentation.

This role will be permanent with NAM info and deploy to client location Chennai.

Work Mode: WORK FROM OFFICE

Offer salary can offer on a decent hike

Role Descriptions:

Exp Range: 6-10 years

Primary Competency : Terraform, Hashi Sentinel (IaC/PaC), Kubernetes (GKE/EKS)

City Locations: Bengaluru or Chennai

Key Responsibilities*

Experience Required: 6-10

Role Descriptions:

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1

2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools

3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)

4. Validate true positives and recommend reducing false positives

5. Lead triage and response for medium to high severity incidents

6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required

7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)

8. Fine-tuning and optimize SIEM use cases to reduce false positives

9. Develop new correlation rules and detection logic

10. Document incidents, findings, and response actions

11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Desire candidate

• Candidate should have valid PF.

Strong Product Security Engineer / Security Engineer / Application Security Engineer / DevSecOps Engineer profiles

2

Mandatory (Experience 1) – Must have minimum 4+ years of hands-on Application/Product Security or Security Engineering experience,

3

Mandatory (Experience 2) – Strong hands-on experience in AWS Cloud Security, Infrastructure Security, and Application Security, with the ability to identify and address security risks at the application/code level.

4

Mandatory (Experience 3) – Must have hands-on experience in secure SDLC/DevSecOps, including code review, API security, CI/CD security automation, vulnerability management, VAPT/penetration testing, and security tooling.

5

Mandatory (Experience 4) – Must have hands-on experience with security audits and compliance frameworks, including SOC 2, GDPR, and ISO 27001, preferably having participated in or driven audits.

6

Mandatory (Experience 5) – Experience setting up, managing, and tracking security tools such as MDM, endpoint agents, security monitoring/scanning tools, secrets/access management, and related security tooling.

7

Mandatory (Experience 6) – Must demonstrate strong coding/development understanding with the ability to read/write code and assess security of APIs, applications, databases, and distributed systems; not just operate security tools.

8

Preferred (Experience 1) – Relevant security certifications such as CISSP, CEH, OSCP, or equivalent.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com