PythonAbout the Role
We are seeking an experienced Cyber Security Specialist who can operate across both offensive and defensive security disciplines. This dual-role professional will lead Vulnerability Assessment and Penetration Testing (VAPT) engagements, act as the in-house Red Team to simulate real-world adversaries, and own the implementation and continuous improvement of the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and related standards. You will combine hands-on offensive security work with governance, audit readiness, and stakeholder engagement across engineering, IT, legal, and executive leadership.
Key Responsibilities
VAPT & Red Team Operations
- Plan, scope, and execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, mobile apps, APIs, networks, cloud environments, wireless, and physical infrastructure.
- Act as the organization's in-house Red Team, simulating advanced persistent threat (APT) actors through adversary emulation, social engineering, phishing campaigns, and physical intrusion testing where authorized.
- Design and execute Red Team operations aligned with MITRE ATT&CK, TIBER-EU, and similar frameworks; develop custom Tactics, Techniques, and Procedures (TTPs).
- Conduct manual and automated exploitation, post-exploitation, lateral movement, privilege escalation, and persistence testing in production-like environments.
- Develop custom exploits, payloads, scripts, and tooling (Python, PowerShell, Bash, C/C++, Go) to bypass security controls during sanctioned engagements.
- Perform source code reviews, threat modeling, and secure architecture reviews of new and existing systems.
- Coordinate Purple Team exercises with the Blue Team / SOC to validate detection coverage and improve defensive playbooks.
- Produce high-quality VAPT and Red Team reports with executive summaries, technical findings, proof-of-concept exploits, risk ratings (CVSS), and prioritized remediation guidance.
- Re-test remediated findings and track closure with engineering and IT teams through to verification.
ISO Compliance & Governance
- Lead the implementation, maintenance, and continual improvement of the ISMS in line with ISO/IEC 27001:2022, including scope definition, Statement of Applicability (SoA), and risk treatment plans.
- Own and maintain ISO policies, procedures, controls, and documentation across the organization, ensuring alignment with ISO 27001, ISO 27017, ISO 27018, and ISO 22301.
- Plan and coordinate internal and external audits; serve as the primary liaison with certification bodies, auditors, and regulators.
- Conduct risk assessments, business impact analyses (BIA), and threat modeling; maintain a central risk register and drive remediation.
- Map VAPT and Red Team findings to ISO 27001 Annex A controls and feed results into the risk management lifecycle.
- Support compliance with adjacent frameworks: SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and DPDP Act (India), as applicable.
- Define and report security and compliance KPIs/KRIs to senior leadership; prepare materials for management reviews and board updates.
- Develop and deliver security awareness training, phishing simulations, and role-based secure-coding training.
- Drive third-party / vendor risk management, including security questionnaires, contractual clauses, and ongoing monitoring.
- Partner with engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and cloud architectures (DevSecOps).
Incident Response & Continuous Improvement
- Support incident response activities: detection, triage, containment, eradication, recovery, and post-incident reviews.
- Maintain business continuity and disaster recovery plans; coordinate BCP/DR testing and tabletop exercises.
- Stay current on emerging threats, CVEs, attacker techniques, regulatory changes, and ISO standard updates; recommend and drive improvements.
Required Qualifications
- 8+ years of progressive experience in cyber security, with at least 4 years in hands-on offensive security (VAPT, penetration testing, or Red Team) and 3+ years in ISO 27001 implementation and audits.
- Proven track record of leading VAPT engagements across web, mobile, API, network, cloud (AWS / Azure / GCP), and wireless environments.
- Hands-on experience executing Red Team operations and adversary emulation aligned with MITRE ATT&CK.
- Deep proficiency with offensive security tooling: Burp Suite Pro, Metasploit, Cobalt Strike (or open-source equivalents like Sliver, Mythic, Havoc), Nmap, Nessus, Nuclei, BloodHound, Impacket, Responder, and OWASP ZAP.
- Strong scripting and exploit development skills in Python, PowerShell, Bash, and at least one compiled language (C/C++, Go, or Rust).
- Proven hands-on experience leading an organization through ISO 27001 certification and surveillance audits end-to-end.
- Strong working knowledge of ISO/IEC 27001:2022 (including Annex A controls), ISO 27002, ISO 27017, ISO 27018, and ISO 22301.
- Solid understanding of security domains: IAM, network security, endpoint security, cloud security, application security (OWASP Top 10, API Security Top 10), and Active Directory attack paths.
- Experience with risk assessment methodologies (ISO 27005, NIST 800-30) and the ability to translate offensive findings into business risk.
- Strong report-writing, policy-drafting, and executive communication skills.
- Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience).
Preferred Qualifications
- Offensive security certifications: OSCP, OSEP, OSWE, OSED, CRTO, CRTP, CRTE, CRTL, GPEN, GXPN, GWAPT, or CEH Practical.
- Governance certifications: ISO 27001 Lead Implementer and/or Lead Auditor, CISSP, CISM, CISA, or CRISC.
- Cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer).
- Published CVEs, security research, bug bounty achievements, or contributions to open-source security tools.
- Experience with Active Directory / Entra ID red teaming, Kerberos attacks, and modern EDR/XDR evasion techniques.
- Experience with container, Kubernetes, and serverless security testing.
- Experience implementing or auditing additional frameworks: SOC 2 Type II, NIST CSF, NIST 800-53, HITRUST, or PCI-DSS.
- Experience with GRC platforms (Vanta, Drata, Sprinto, ServiceNow GRC, Archer, OneTrust).
- Experience in regulated industries: financial services, healthcare, SaaS, or critical infrastructure.
- Experience briefing executive leadership, customers, and external auditors on offensive findings and remediation strategy.
Shubham Vishwakarma
Full Stack Developer - Averlon
About Fonada
About
Company social profiles
Similar jobs
The Talent Acquisition Specialist – IT Recruitment is responsible for identifying, attracting, and hiring high-quality technical talent in line with business requirements. The role focuses on timely, cost-effective, and quality-driven hiring while building strong talent pipelines and delivering an excellent candidate and stakeholder experience through data-driven recruitment practices.
Key Responsibilities
Collaborate with hiring managers to understand current and future IT hiring needs
Translate business requirements into structured recruitment plans with timelines and deliverables
Conduct detailed role intake discussions covering skills, experience, and behavioral competencies
Manage end-to-end recruitment lifecycle from sourcing to offer closure
Source candidates through multiple channels including job portals, LinkedIn, referrals, and internal databases
Screen, interview, and assess candidates to build high-quality shortlists
Schedule and coordinate interviews while ensuring smooth candidate experience
Provide market insights and hiring recommendations to stakeholders
Build and maintain talent pipelines for critical and recurring IT roles
Track recruitment metrics such as TAT, quality of hire, and cost efficiency
Required Skills: Program Management, Collaboration and Coordination, Analytical and Problem-Solving skills, Excellent cross-functional leadership experience, Strategic Planning & Execution, Leadership & Stakeholder Management
Criteria:
● Experience in Program Management / Strategic Planning / Demand Planning.
● Must be from Tier-1 academic background (IIT, NIT, NSU preferred).
● Need candidate from Ecommerce and Startup only.
● Strong demand-planning and business acumen with the ability to identify growth and whitespace opportunities.
● Candidate should have proven ability to build programs from 0–1 (Scratch - End) and drive initiative execution.
● Excellent stakeholder management & presentation skills, with strong proficiency in MS Excel.
● Experience in forecasting & planning tools, and the ability to thrive in fast-paced, ambiguous environments.
● Candidate must have Leadership ability to execute cross-functional projects, turning strategy into clear, measurable results.
● Candidate having Founder's Office Experience will be an added advantage.
● Candidate having OTA Channel's (Online Travel Agency) working experience will be considered a strong plus.
Description
About the Role
As a Program Manager, you will drive strategic, cross-functional initiatives that improve how we plan, operate, and scale. You’ll lead high-impact programs that bring structure, clarity, and momentum to complex business problems, with a strong focus on data-driven, scalable execution.
You will collaborate closely with teams across Growth, Marketing, Operations, and Tech to align priorities, streamline processes, and ensure our systems evolve with the pace of the business.
Key Responsibilities
- Own and drive high-impact strategic programs from ideation to execution, ensuring each initiative contributes to business growth.
- Break down complex, ambiguous problems into structured, actionable plans and lead execution across teams.
- Collaborate with Product, Marketing, Sales, and Operations to align goals, remove bottlenecks, and deliver scalable outcomes.
- Lead cross-functional project planning, development, and execution, translating strategy into measurable results.
- Partner with Analytics and Business Intelligence teams to ensure data-backed decision-making.
- Identify new business improvement opportunities and co-create strategies with leadership.
- Track key performance metrics, identify trends, and drive course-correction using real data.
- Bring clarity to chaos by defining processes, streamlining operations, and ensuring team alignment.
- Create structured documentation, frameworks, and playbooks to make initiatives repeatable and scalable.
What We Are Looking For
- Graduation from a Tier 1 college (IITs, IIMs, NITs, ISB, or equivalent).
- 3–5 years of experience in Program Management, Strategic Planning, Business Operations, or Demand Planning, preferably in high-growth environments.
- Strong business acumen and understanding of how demand planning impacts growth, revenue, and customer experience.
- A structured problem-solver who can simplify complex challenges into scalable solutions.
- Exceptional stakeholder management and cross-functional collaboration skills.
- Solid understanding of forecasting processes, planning tools, and operational levers.
- Ability to thrive in fast-paced, ambiguous startup environments.
What We Offer
- Opportunity to shape how we scale and operate at the next level.
- A chance to be at the forefront of driving change in a fast-growing startup.
- A collaborative, dynamic work environment.
- Competitive compensation and benefits.
Data AnalyticsKey Responsibilities
- Data Management & Governance: Maintain, update, and streamline daily, weekly, and monthly MIS reports. Ensure 100% data accuracy and integrity across all platforms.
- Business Intelligence & Analytics: Analyze historical data, market trends, and key performance indicators (KPIs) to identify business bottlenecks, growth opportunities, and operational inefficiencies.
- Dashboard Development: Design, build, and maintain automated dashboards and visual reports using tools like Power BI, Tableau, or Advanced Excel.
- Cross-Functional Collaboration: Partner with department heads (Sales, Finance, Operations, HR) to understand their data requirements and deliver tailored analytical solutions.
- Process Optimization: Evaluate current business processes, gather requirements for system upgrades, and recommend data-driven strategies to improve workflow automation.
- Predictive Forecasting: Utilize statistical data to help leadership forecast revenue, demand, and resource allocation.
About SuperHumanRace
SuperHumanRace is an AI-powered sustainability tech platform that helps large organizations automate ESG reporting, track carbon emissions across value chains, and generate actionable insights for impact, risk, and opportunity at the climate-money nexus. Our platforms are used by industry leaders across 31 countries, spanning sectors like real estate, cement, steel, and BFSI. We are pioneering dynamic emissions factors, real-time sustainability intelligence, and democratised climate intelligence to transform how the world measures good.
About the Role
We are looking for an experienced Accounts Manager to oversee accounting operations, ensure compliance, and manage financial reporting for SuperHumanRace. The ideal candidates will bring 6–10 years of experience in accounting and finance, a strong command of statutory compliance, and the ability to manage end-to-end financial processes efficiently. You will work closely with leadership to maintain accurate books of accounts, manage cash flows, and streamline financial controls to support the company’s growth and sustainability mission.
Key Responsibilities:
1. Accounting & Financial Management
- Oversee day-to-day accounting operations and ensure accurate daily entries across all entities.
- Manage monthly bank and credit card reconciliations (by or before the 7th of each month).
- Maintain systematic accounting aligned with statutory and compliance requirements.
- Prepare Accounts Payable and Receivable Reports with periodic updates to leadership.
- Issue invoices as per invoicing calendars and manage timely payment follow-ups.
- Process vendor invoices and payments weekly; reconcile all payment gateway inflows daily and issue 80G receipts.
- Track fund utilization for donor-funded projects and generate utilization statements with necessary documentation for auditor review.
- Coordinate cash flow and inter-entity transactions.
2. MIS, Reporting & Budgeting
- Prepare and review Business Performance MIS and dashboards by the 7th of each month, including variance and trend analyses.
- Develop and update cash flow MIS by the 22nd of each month, forecasting short- and long-term liquidity, and plan fund allocation
- Prepare and maintain party-wise receivables and payables aging reports, along with monthly Balance Sheet and Profit & Loss Statements.
- Maintain an organized financial data room with up-to-date documentation required for funding, audit, or compliance.
- Collaborate with leadership for budgeting, forecasting, and financial planning.
- Support decision-making through data-driven financial insights and variance commentary.
3. Statutory Compliance & Taxation
GST Compliance
- Prepare and submit monthly GST workings by the 16th of each month and ensure timely filing of GSTR-1 and GSTR-3B.
- Maintain GST records, perform ITC reconciliation, and ensure all company details are current across GSTINs.
- Stay informed on GST law updates and implement changes proactively.
TDS & Income Tax
- Manage monthly TDS computation, payment, and quarterly return filing.
- Ensure timely issuance of TDS certificates and manage revisions (up to two per quarter per entity).
- Coordinate with auditors for advance tax, ITR preparation, and filing for both entities and directors.
- Oversee accounts finalization and assist in the preparation of P&L and Balance Sheet statements.
4. Payroll & Employee Reimbursements
- Process monthly payroll by the 5th of each month in coordination with HR and Leadership.
- Ensure accurate computation and filing for payroll-related compliances (TDS, EPF, ESIC, Professional Tax, Gratuity, etc.).
- Handle employee reimbursements by the 20th of each month (for claims up to the 7th).
- Manage investment proof submissions, declarations, and related payroll reconciliations.
- Ensure timely enrollment and compliance updates for all statutory employee benefits.
5. Governance, Audit & Board Support
- Maintain audit-ready documentation (vouchers, bills, ledgers) by the 15th of every month.
- Generate provisional financial statements by the 7th of each month (and quarterly by the 15th) for leadership and board review.
- Ensure compliance with Income Tax, GST, RBI, FEMA, FCRA, 12A, 80G, LUT, and all related financial regulations.
- Coordinate with internal and external auditors for smooth audits and timely resolution of queries.
- Support the leadership team in board presentations and compliance documentation.
Skill(s) Required
Accounting | Financial Reporting | Taxation (GST, TDS, Income Tax) | Payroll Management || Compliance (PF, ESIC, FCRA, 12A, 80G, FEMA, RBI)| Budgeting & Forecasting | Financial MIS | Cash Flow management | Audit Coordination | Zoho Books | Zoho Analytics | Zoho Payroll | Tally | Google Workspace (Sheets, Docs, Drive) | MS Excel (Advanced) | Analytical Thinking | Documentation | Leadership Communication
Who Can Apply
- Bachelor’s or Master’s degree in Accounting, Commerce, or Finance (CA Inter preferred).
- 6–10 years of experience in accounting, finance, or audit roles.
- Strong understanding of statutory compliance (GST, TDS, Income Tax required; PF, ESIC, PT, etc. knowledge will be a plus).
- Proficiency in accounting tools like Zoho Books required; Tally, QuickBooks, or similar will be a plus.
- Strong command over Google Workspace (Sheets, Docs, Forms, Drive) for reporting and collaboration.
- Proven ability to manage multiple priorities and meet deadlines.
- High integrity, accuracy, and ownership in financial management.
- Experience managing accounting for multiple entities will be an added advantage.
Probation
Duration: 6 months
Perks
Smart Casual dress code | 5 days a week | Free snacks & beverages | Health Insurance
Additional Information
Note: This role is a full-time, in-office position based in New Delhi or Mumbai. We are a work-from-office culture with flexibility offered to the team on an as-needed basis as per our policies.
How to Apply
Send your application with a cover letter and CV to arman @superhumanrace dot com and cc hr@mysuperhumanrace dotcom
Subject: Application for Accounts Manager
At SuperHumanRace, we believe in meritocracy and are proud of the diverse team we have built. We welcome talent from all regions, geographies, languages, backgrounds, cultures, genders, and age groups in our attempt to accelerate progress and deliver on our shared goals of sustainability and equity.
NodeJS (Node.js)
Express
MongoDBMerchify is a one-stop solution for creators to start their merch store for zero investment. Our goal is to empower creators to monetize their content and grow their audience without the need for any upfront investment.
We’re in search of a back-end engineer that specializes in building highly scalable, highly available, reliable, secure, and fault-tolerant systems. As a part of the Core Backend team, you'll be working on some complex and interesting problems. With a lean team like ours, you'll have ample opportunities to work with various aspects of the application and build something meaningful.
What you'll do?
- Work closely with design, product management, and front-end teams to create REST APIs using NestJS
- Write reusable, testable, and efficient code
- Design and implementation of low-latency, high-availability, and performant applications
- Work on the implementation of security and data protection
- Review and optimize the app usage by monitoring key metrics and rectifying the issues proactively
Must haves
- 1+ years of experience in NodeJS-based frameworks like NestJS, and microservices-based architecture is a bonus.
- Understanding of OOPS concepts, persistence, threading, queuing, and caching.
- Thorough knowledge of designing, implementing and scaling relational and document-based databases
- A love for systems and an ability to think through and plan for their life cycles, edge cases, interactions, and failure modes
- First principles thinking, Excellent problem-solving ability
- A good all-rounder with a can-do, startup mentality
Nice to haves
- Experience with ReactJS
- Cloud deployment and scaling experience
Why you should join today?
Merchify wants to make a change for the better in lifelong learning. By joining at the start of the adventure you will have an opportunity to make this your own baby and have fun shaping the future of the industry.
Java
Javascript
React.js
Angular (2+)
AngularJS (1.x)- Demonstrated experience as a software engineer, with at least 3-5 years’ experience in technology roles
- Experience working on complex systems and cloud architectures, preferably in a B2B or enterprise context
- Experience with the Java programming language and frameworks such as Spring & SpringBoot
- Experience with front-end Javascript frameworks such as ReactJS
- Experience working in databases and SQL queries for high-performance
- Experience and keen understanding of the value of working in agile teams
- A “quality-first” mindset, with experience working in continuous integration environments
- Highly effective at communicating
- Respect for other team members and a highly collaborative approach to working and learning together
React NativeJavascript
Redux/FluxWhat You Will Do:
- Your primary focus will be to implement responsive & high-quality UI and reusable code for CoinSwitch platform, with a particular focus on performance.
- You will help translate requirements and mockups into fully functioning features using frontend technologies.
- You will ensure the technical feasibility of UI/UX designs while maintaining high quality standards.
- You will collaborate timely with designers, product managers and own the front-end layer.
- You will constantly look for optimizing applications to handle high scale.
- You will keep yourself updated with the latest web technologies coming up in the market and suggest ways to implement it in our system.
What You Should Have:
- You should have 5+ years of extensive experience in Javascript.
- You should have 3+ years of experience in ReactNative based Android and IOS apps.
- You have experience writing clean, modular, object- oriented and optimized scripts.
- You are aware of Javascript design patterns and can architect a fairly complex UI.
- You have experience building a product using a mainstream library or framework (ReactNative ecosystem preferred).
- You keep pace with the ever-changing specs of cutting edge front-end technologies.
Good to Have:
- Prior experience working with fin-tech companies
Android Development
Programming
Laravel
PHP
CakePHP
jQuery
Follow CutshortShubham Vishwakarma
Full Stack Developer - Averlon