Cutshort logo
For Employers
Credilio Financial Technologies Pvt. Ltd. logo
Information Security Officer

Information Security Officer at Credilio Financial Technologies Pvt. Ltd. · Mumbai · 4 - 8 years · Raised funding · Posted 21 Jul 2026

Credilio Financial Technologies Pvt. Ltd.'s logo

Information Security Officer

Munjal Dhamecha's profile picture
Posted by Munjal Dhamecha
4 - 8 yrs
Best in industry
Mumbai
Skills
Information security
Information security management system
Audit
Compliance
PCI DSS
Risk assessment

Job Summary

 

We are looking for an Information Security & Compliance Officer to own and drive information security governance, risk management, audit readiness, compliance execution, and cybersecurity coordination.

 

The person will maintain compliance readiness across ISO 27001, PCI DSS, DL-SAR, CICRA, bank/partner audits, RBI requirements, Digital Lending Guidelines, and data protection requirements, while supporting readiness for ISO 27701, SOC 2 Type 2, DPDP, and other future compliance needs.

 

Responsibilities

·      Own and drive information security governance, risk management, compliance, and audit readiness.

·      Manage the audit and compliance calendar, including bank audits, regulatory reviews, partner reviews, security questionnaires, and external assessments.

·      Maintain audit and compliance readiness for ISO 27001, PCI DSS, DL-SAR, CICRA, RBI Cyber Security Framework, Digital Lending Guidelines, DPDP/data privacy, and other applicable requirements.

·      Maintain policies, procedures, risk registers, audit evidence, compliance trackers, security documentation, and closure reports.

·      Conduct and coordinate internal reviews for access control, privileged access, policy compliance, vendor security, cloud security, and security configurations.

·      Coordinate VAPT, source code reviews, cloud security reviews, configuration reviews, SAST/DAST activities, and remediation tracking.

·      Work with Technology, DevOps, IT, Compliance, HR/Admin, vendors, and business teams to close vulnerabilities, audit findings, security gaps, incidents, and risks.

·      Own and drive security incident response execution, including escalation coordination, RCA tracking, corrective actions, evidence documentation, closure reports, and periodic drills.

 

Required Skills

·      Good understanding of information security, GRC, IT risk, audits, compliance, and cybersecurity controls.

·      Working knowledge of application security, API security, cloud security, IAM, vulnerability management, incident response, secure SDLC, and vendor security.

·      Understanding of ISO 27001, PCI DSS, RBI Cyber Security Framework, Digital Lending Guidelines, banking/fintech requirements, and data protection requirements.

·      Ability to assess technical security risks, define controls, and coordinate remediation with technical teams.

·      Strong audit handling, evidence management, documentation, communication, follow-up, and ownership.

·      Ability to work independently with auditors, banks, vendors, technical teams, and business stakeholders.

 

Required Qualification

·      3–8 years of experience in information security, GRC, IT risk, cybersecurity coordination, audit, or compliance.

·      Experience handling bank audits, regulatory audits, ISO 27001, PCI DSS, VAPT coordination, access reviews, risk registers, audit evidence, and remediation tracking is preferred.

·      Experience in fintech, banking, NBFC, payments, lending, or regulated technology environments is preferred.

·      Bachelor’s degree in Computer Science, IT, Information Security, or a related field.

Relevant certification preferred, such as ISO 27001 LA/LI, CISA, CISM, PCI DSS, ISO 27701, Security+, CEH, or equivalent.

Read more
Users love Cutshort
Read about what our users have to say about finding their next opportunity on Cutshort.
Shubham Vishwakarma's profile image

Shubham Vishwakarma

Full Stack Developer - Averlon
I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.
Companies hiring on Cutshort
companies logos

About Credilio Financial Technologies Pvt. Ltd.

Founded :
2020
Type :
Product
Size :
100-500
Stage :
Raised funding

About

Credilio is founded with the idea of digitizing the distribution value chain of personal finance products. The mission of Credilio is to create a nationwide army of multi-branded trained advisors who can assist in the digital onboarding of loans and cards. Credilio enables a small financial advisor to educate customers and recommend lending products that are best suited to meet their unique requirements and further enables them to subscribe for credit cards or loans digitally.


The company does this by providing a large range of product offerings and a customized recommendation tool through a simple mobile app that empowers advisors to be truly digital and future-ready. In addition, the platform allows for instant online approval by leveraging open banking APIs of Banks and NBFCs, thus making the purchase process transparent and paperless. It has reduced the average prospecting-to-onboarding time to less than 10 minutes in a single session as compared to the industry average of an interrupted process over 2-3 days.


A challenger start-up, Credilio is the brainchild of second-time entrepreneurial duo Mr. Aditya Gupta and Mr. Anand Kapadia. It’s backed by a clutch of Venture Capital funds namely Cornerstone Venture Capital Partners, Exfinity Venture Partners, and Param Capital founder Mukul Agarwal.


The platform currently partners with 20+ leading Banks and NBFCs and has over 10,000 Financial Advisors who have assisted more than 0.5 million customer applications getting processed fully digitally in a span of less than a year. The capital raised will power Credilio’s ambitious plans to meet an ARR of 100 cr. by March 2023 and serve 25 million customers through a million advisors in the next 3 years.

Read more

Tech stack

skill iconNodeJS (Node.js)
TypeScript
AdonisJS
skill iconPostgreSQL
skill iconFlutter
skill iconVue.js

Photos

Company featured pictures

Connect with the team

Profile picture
Munjal Dhamecha
Profile picture
Yusuf Qureshi

Company social profiles

instagramlinkedintwitterfacebook

Similar jobs (10)

Potentiam Offshore Solutions Pvt Ltd
Bhavya Pallapu
Posted by Bhavya Pallapu
Bengaluru (Bangalore)
3 - 8 yrs
₹12L - ₹20L / yr
SOX 404
ITGC
NIST
ISO27001
CSF

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less


Read more
Gurugram
8 - 12 yrs
₹20L - ₹30L / yr
Information security
GRC
Cyber Security
cloud security
CISM
+5 more

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor


Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.


Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.




mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743


website: www.glansolutions.com

Read more
Gurugram
10 - 15 yrs
₹25L - ₹40L / yr
Information security
Cyberark
Qualys
EDR
Palo Alto
+6 more

Position: Manager – Information Security

Experience: 10+ years

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor


Key Responsibilities:

  • Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
  • Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
  • Oversee security risk assessments, audits, and remediation plans across IT and business units.
  • Manage a team of security professionals; mentor, coach, and evaluate performance.
  • Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
  • Lead incident response, RCA, and post-mortem reviews.
  • Drive security awareness and training programs across the organization.
  • Manage security budgets, vendor relationships, and contract negotiations.


Technical Skills:

  • Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
  • Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
  • Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.




mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88 O2 74 97 43


Read more
One of our US based Client
One of our US based Client
Agency job
via HyrHub by Shwetha Naik
Remote only
4 - 8 yrs
Best in industry
IT security
IT security audit
GDPR

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.


 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

  • Performs daily health checks as documented by the IT Security team.
  • Supports the Security team by documenting and performing support tasks.
  • Participates in change management, incident management, audit and business continuity processes.
  • Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
  • Participates in internal and external compliance (SOC 2) audits.
  • Recommends security enhancements.

Job specifics:

  • Familiarity with standard security concepts, practices and procedures.
  • Knowledge of Windows operating systems.
  • Strong Documentation, communication skills and attention to detail.
  • Able to work independently and as a part of a team to deliver completed projects on-time.
  • Identifies ways to continuously improve own and/or company performance.
  • Knowledge of security toolsets
  • Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
  • Knowledge of database security.
  • Knowledge of SIEM technology and security event correlation and monitoring.
  • Experience with AWS.             
  • Proficient with computer software including Salesforce 


 EDUCATION & EXPERIENCE  

  • Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
  • Minimum of 3 years of hands-on IT Security & Audit experience.
  • Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.


Read more
Bean HR Consulting
snigdha Khurana
Posted by snigdha Khurana
Gurugram
7 - 10 yrs
Best in industry
Cyber Security
IAM
Identity management
Security operations
Security Information and Event Management (SIEM)

📢 We're Hiring | Cybersecurity Consultant | Gurugram


Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana



We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.


🔹 Key Responsibilities

  • Manage and strengthen security controls across enterprise IT infrastructure.
  • Perform vulnerability assessments, remediation tracking and patch management.
  • Monitor security alerts, investigate incidents and support threat hunting.
  • Implement and manage SIEM, EDR and endpoint security solutions.
  • Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
  • Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
  • Assist with backup, recovery, disaster recovery and business continuity activities.
  • Maintain security documentation, remediation evidence and audit compliance.


🔹 Required Skills

  • 7+ years of relevant experience in cybersecurity, security engineering or security operations.
  • Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
  • Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
  • Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
  • Strong understanding of incident response, threat hunting, network security and security remediation.
  • Experience with EDR, IAM and enterprise security controls.


⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.


📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

Read more
Metadome.ai
at Metadome.ai
2 candid answers
Ananya  Arenavaru
Posted by Ananya Arenavaru
Bengaluru (Bangalore)
5 - 10 yrs
₹15L - ₹18L / yr
Jump Cloud
Sophos
google workspace
SSO
Sophos Central administration
+10 more

IT Systems Engineer

Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure

Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership

Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at

scale.

The Mission

About Metadome.ai

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the

Metaverse Standards Forum and the VR/AR Association.


About the Role

We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.

This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.


Core Responsibilities

● Identity & Access Management — JumpCloud:

○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.

○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.

○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.

○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.

○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

● Google Workspace Administration — GWS:

○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.

○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,

and sharing / visibility policies.○

○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.


Endpoint & Threat Protection — Sophos:

○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and

servers.

○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.

○ Maintain endpoint encryption, web / application control, and device-hardening standards.

○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.


Network, Firewall & Wi-Fi:

○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.

○ Administer enterprise Wi-Fi and wired networks (switches, access points), including

RADIUS-backed authentication.

○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.

○ Implement network monitoring, intrusion detection, and centralized logging.

Hardware, Software & Asset Management:

○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and

decommissioning.

○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.

○ Maintain an accurate hardware and software inventory and asset register.

○ Manage software deployment, patch management, and license compliance.


Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:

○ Operate and continuously improve the company's Information Security Management System

(ISMS).

○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control

implementation, evidence collection, and continuous monitoring.

○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA

assessments.

○ Serve as a primary point of contact during external audits and customer security reviews.

○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response

runbooks.

○ Drive security-awareness and phishing-simulation programs across the organization.


IT Operations & Support:

○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.

○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.

○ Manage backups, disaster recovery, and business-continuity testing.

○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within

budget.

○ Maintain documentation, runbooks, and standard operating procedures.

○ Own and report on the IT budget and asset allocation.


Required Skills & Experience

● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems

below rather than purely supervisory exposure.

● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.

● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.

● Sophos — hands-on endpoint / XDR administration and threat response.

● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.

● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one

full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.


Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.

System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.


Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.


Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.


Preferred Qualifications


●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.

●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.

●Scripting and automation for IT operations (Bash, PowerShell, or Python).

●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.

●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.


Why Join Us

You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running

flawlessly.



Read more
Shipthis Inc
at Shipthis Inc
2 candid answers
Shariba Tasneem
Posted by Shariba Tasneem
Bengaluru (Bangalore)
1 - 3 yrs
₹7L - ₹9L / yr
ISO/IEC 27001:2005
skill iconAmazon Web Services (AWS)
Google Cloud Platform (GCP)
GRC

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.


Learn more at www.shipthis.co


Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.


What You’ll be Doing


Security Operations

  • Monitor infrastructure, application, and security alerts and assist with incident investigation.
  • Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
  • Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
  • Track security issues and corrective actions through closure.

Vulnerability Management

  • Run and review application and infrastructure vulnerability scans.
  • Maintain a vulnerability register and coordinate remediation with engineering teams.
  • Support VAPT and penetration-testing exercises and validate closure of findings.
  • Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

  • Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
  • Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
  • Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
  • Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

  • Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
  • Maintain device inventory and monitor endpoint compliance.
  • Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
  • Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
  • Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

  • Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
  • Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
  • Automate repetitive deployment, infrastructure, security, and compliance tasks.
  • Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
  • Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.


Required Fundamentals

  • Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
  • Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
  • Strong troubleshooting, ownership, attention to detail, and willingness to learn.


Desired Qualifications

  • 1–2 years of experience with strong fundamentals are welcome.
  • Basic scripting knowledge in Python, Bash, or similar.
  • Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
  • Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.


We Welcome Candidates:

  • Who can join immediately
  • Female candidates returning to work after a career break are strongly encouraged.


We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.


Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product



Read more
Resources Valley
at Resources Valley
1 recruiter
Manind Gupta
Posted by Manind Gupta
Jaipur
1 - 4 yrs
₹2L - ₹8L / yr
Cyber Security
cyber

Cyber Security Expert


We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.


Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.



Read more
ISO CERTIFICATION BODY
ISO CERTIFICATION BODY
Agency job
Ahmedabad, gujarat
5 - 12 yrs
₹7L - ₹10L / yr
QMS
Quality audit
ISO 9000
ISO/IEC 27001:2005
ISO 14000
+5 more

Job Title: Auditor – Management Systems (ISO Standards)


Location: Ahmedabad


Employment Type: Full Time


About the Role


We are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordinationWe are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordination


We are hiring an experienced Management System Auditor to conduct ISO audits, deliver quality assessment outcomes, and support certification activities. The ideal candidate should have hands on experience in ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 22000, ISO 50001, or other ISO standards, along with strong reporting and client handling skills.



The role involves extensive travel, interaction with clients across different industries, and compliance with ISO IEC 17021 1 and ISO 19011 guidelines.



Key Responsibilities


  • Plan and conduct third-party certification audits, including Stage 1, Stage 2, Surveillance, and Re-certification audits.
  • Assess client compliance with applicable ISO management system standards.
  • Prepare audit plans, checklists, and detailed audit reports.
  • Identify non-conformities, document audit findings, and ensure timely report submission.
  • Coordinate with client teams and maintain professional audit practices.
  • Identify potential business opportunities during client engagements.

Mandatory Requirements

  • Education: B.E./B.Tech in Electrical Engineering.
  • Experience: Minimum 5 years of relevant professional experience; experience in third-party auditing is strongly preferred.
  • Certifications: IRCA/CQI Lead Auditor certifications in ISO 9001, ISO 14001, ISO 45001, and ISO 50001, or willingness to obtain all required certifications before joining.
  • Audit Experience: Exposure to certification audits, audit documentation, compliance assessments, and ISO audit methodologies.
  • Industry Exposure: Electrical/Electronics Manufacturing, Power & Energy, Engineering, Automation, Infrastructure, or Renewable Energy is preferred.
  • Strong communication, analytical, report-writing, and client-handling skills.
  • Willingness to travel extensively (60–80%) across India and occasionally overseas.

What This Role Offers

  • Exposure to diverse industries and management system certification audits.
  • Opportunities for professional development and continuous learning.
  • Performance-based appraisal and competency development.


Read more
Gurugram
11 - 18 yrs
₹20L - ₹38L / yr
IT Infrastructure & Security
IT infrastructure
IT security
Palo Alto
cyberark
+9 more

Job Title: Chief Manager – IT Infrastructure & Security

Location: Gurgaon

Experience: 12+ year in same

Qualification: B.Tech/MCA

Preferred Certifications: Palo Alto PCCSE, CyberArk, Nutanix NCP, VMware VCP, CCNP.

Must have exp in Server, network, firewall, edr, virtualization system (vm-ware, dutanix)

Technical Experience Required:

  • AWS (Amazon Web Services) and/or Microsoft Azure
  • VMware ESX / ESXi
  • Windows Server
  • Active Directory (AD)
  • Kaseya
  • DNS & DHCP
  • Forcepoint / Websense
  • Kaspersky AV
  • Cisco networking
  • SAN (Storage Area Network)
  • Core Networking Tech: VoIP (Voice over IP), VPN (Virtual Private Network), TCP/IP, WAN/LAN/WLAN routing, and switching protocols.

Key Deliverables

Infrastructure Architecture & Operations

  • Own the scoping, architecture and design of new infrastructure that will support the business.
  • Administer HP Infrastructure, Nutanix HCI, Dell VxRail, VMware, Windows and Linux environments.
  • Architect, monitor and maintain Active Directory services, File Services, Server Infrastructure and WAN/LAN/WLAN supporting business-critical systems.
  • Be responsible for server, storage, network, security and monitoring hardware, software and services, ensuring they are optimised for availability, stability, integrity, performance and scalability.
  • Forecast demand for storage, computing and network capacity, and take appropriate action before capacity limits are reached.
  • Maintain IT hardware and software — including servers, peripherals, network nodes, terminals and wiring — manage equipment inventory and the hardware life cycle.

Network & End-User Computing

  • Manage LAN/WAN, VPN, Cisco routing/switching and Cisco Meraki WiFi environments.
  • Troubleshoot and quickly resolve network issues.
  • Oversee end-user computing — laptops, desktops, printers, AV devices, iOS devices/iPad, MDM and endpoint management — and end-user support operations across Head Office, Stores and Warehouse. Security, Identity & Compliance
  • Manage Palo Alto firewalls, SentinelOne EDR/XDR, CyberArk PAM, GTB DLP and Forcepoint/ForceScout security platforms.
  • Perform regular security monitoring to identify any possible intrusions.
  • Manage certificate/PKI and domain/DNS services, including issuance, renewal, rotation and revocation.
  • Establish and maintain corporate IT infrastructure standards for configuration and security.
  • Ensure IT governance, audit and compliance requirements are met.

Continuity, Backup & Performance

  • Define, implement, test and maintain data back-up and recovery protocols to ensure availability.
  • Drive business continuity, backup, disaster recovery and infrastructure modernisation projects.
  • Be accountable for measuring and optimising application and infrastructure performance, and lead recovery actions after system failures.
  • Monitor and maintain infrastructure stability against defined KPIs.

Leadership, Vendor & Governance

  • Provide support to, manage and train the IT Infrastructure team.
  • Manage vendor relationships, budgets, SLAs and team performance.
  • Project-plan with clear and concise communication methods.
  • Prepare and maintain documentation of the IT infrastructure.

Additional Technical Competencies

The candidate must have experience in one or more of the following areas:

Network & Infrastructure Engineering

  • Proficient understanding of IP networking: Cisco, TCP/IP, Window Server, Network Security, Cloud Servers that includes technical and functional understanding of network security, VOIP, WAN, LAN, and internet routing and switching protocols, wireless and VPN capabilities.
  • Demonstrated Data Center/Server Room build out experience (Power, Network, Cooling, etc...).
  • Expertise in VMware ESX, SAN, Monitoring tools, and Operating Systems (strong understanding of Windows).
  • Experience in managing VMware environment.
  • Experience in managing cloud-based infrastructure like AWS/Azure.
  • Expertise in windows environment in domain/Forrest/DNS/DHCP. System Administration & Maintenance
  • Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
  • Use of system management tool Kaseya and development of new scripts in this tool for deployment of policies.
  • Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.
  • Manage processes to Create, change, and delete user accounts per request from HR.
  • Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.

Security, Backups & Data Protection

  • Skilled in managing websense/forcepoint DLP/Web security.
  • Experience in managing Kaspersky antivirus system.
  • Perform regular security monitoring to identify any possible intrusions.
  • Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.
  • Closely monitoring and developing the procedures for backups of the servers.
  • Perform regular file archival and purge as necessary.

Monitoring, Testing & Troubleshooting

  • Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
  • Daily monitor the Server Event Logs, Firewall and other security equipment logs and also the logs of scheduled archival software.
  • Test the operating system software, the networking software and also the computer hardware.
  • Must possess the initiative to resolve issues before they become critical.

Project Management & Documentation

  • To assist IT Head for technical issues on various projects such as support on testing, rolling out and execution of projects.
  • Strong written communication skills including documentation.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

Read more
Why apply to jobs via Cutshort
people_solving_puzzle
Personalized job matches
Stop wasting time. Get matched with jobs that meet your skills, aspirations and preferences.
people_verifying_people
Verified hiring teams
See actual hiring teams, find common social connections or connect with them directly.
ai_chip
Move faster with AI
We use AI to get you faster responses, recommendations and unmatched user experience.
Did not find a job you were looking for?
icon
Search for relevant jobs from 10000+ companies such as Google, Amazon & Uber actively hiring on Cutshort.
companies logo
companies logo
companies logo
companies logo
companies logo
Get to hear about interesting companies hiring right now
Company logo
Company logo
Company logo
Company logo
Company logo
Linkedin iconFollow Cutshort
Users love Cutshort
Read about what our users have to say about finding their next opportunity on Cutshort.
Shubham Vishwakarma's profile image

Shubham Vishwakarma

Full Stack Developer - Averlon
I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.
Companies hiring on Cutshort
companies logos