Specialist-IT Governance & Compliance at IDFC Bank · Navi Mumbai, Mumbai · 5 - 10 years · ₹15L - ₹24L / yr · Posted 4 Jan 2025
Job Purpose:
The role entails the responsibility to be a part of IT Governance and Compliance Team of the bank and would be working towards GRC control function: Compliance & Regulatory reporting viz Cyber KRI, TRANCHE, ICAAP etc.
Roles & Responsibilities:
- Custodian of IT governance and IT process governance framework.
- Handling of Regulatory audits and submissions.
- To understand Indents from regulators, collated, review the data and timely submission.
- Responsible for IT policy creation, review, update, awareness, and monitoring.
- Administration of key IT processes: E.g., incident management, policy exception management
- Will be reporting to Lead IT Governance.
- Identify improvements and breakdowns in IT governance elements with significant business impact.
- Create and maintain library of governance artifacts and other supporting documentation.
- Proactively identify and manage risks/issues, ensure proper visibility and communication occur to senior management.
- Ensures compliance with all policies and procedures in the execution of technology projects.
- Provide guidance and trainings to Project team members in the field regarding IT governance.
- Capture and share best- practice knowledge amongst the team.
- Create an environment that promotes collaborative learning and collective ownership of responsibilities.
- Strong analytical and problem-solving skills. Excellent communication and interpersonal abilities.
- Ability to work independently and collaborate effectively in a team environment.
Education Qualification (Fulltime):
Certified Chartered Accountant (CA)
Shubham Vishwakarma
Full Stack Developer - Averlon
About IDFC Bank
About
Company social profiles
Similar jobs (10)
Job title Sox Compliance Officer
Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/
Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.
Industry: legal, insurance, and healthcare services.
Purpose of role:
We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2
Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.
Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.
Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options
Location and hours Bangalore Office / UK hours
Read less
Location: GIFT City, Gandhinagar, Gujarat Experience: Minimum 5 Years Job Summary We are looking for a qualified and experienced Principal Officer to oversee regulatory compliance, fund management activities and operational requirements in GIFT City. The ideal candidate should have relevant experience in securities markets, financial products, fund management or financial services, along with an understanding of IFSCA regulations. Roles & Responsibilities 1 Oversee and monitor compliance with applicable IFSCA regulations, guidelines and regulatory requirements. 2 Ensure that fund management activities and operations are conducted in accordance with applicable regulatory frameworks. 3 Monitor investor onboarding, KYC (Know Your Customer), AML (Anti-Money Laundering) and due diligence processes. 4 Oversee preparation and submission of regulatory reports, returns and filings within prescribed timelines. 5 Coordinate with IFSCA, auditors, fund administrators, legal advisors and other relevant stakeholders on regulatory matters. 6 Monitor changes in regulatory requirements and ensure timely implementation within the organization. 7 Identify compliance risks, gaps and potential regulatory issues, and recommend appropriate corrective actions. 8 Maintain regulatory records, compliance documentation, policies and procedures. 9 Support internal and external audits, regulatory inspections and information requests from regulatory authorities. 10 Ensure appropriate investor protection, transparency and governance practices. 11 Coordinate with internal teams to ensure smooth execution of fund management and compliance-related activities. 12 Report significant compliance matters to senior management and monitor their resolution. Qualification Requirements A professional qualification, postgraduate degree, or postgraduate diploma of at least one year in Finance, Law, Accountancy, Business Management, Commerce, Economics, Capital Markets, Banking, Insurance or Actuarial Science. • Recognised professional qualifications include CA, CS, CMA and equivalent foreign qualifications. • Alternatively, CFA, FRM or any other relevant qualification specified by IFSCA may be accepted. • A candidate with at least 15 years of relevant Fund Management experience may qualify with a Bachelor's Degree in any discipline. Experience Requirements • At least 5 years of relevant experience in securities markets or financial products at an eligible institution. • Minimum 3 years of post-qualification experience in an eligible institution, along with valid IFSCA-specified certification, for Principal Officer and Fund Management Key Managerial Personnel (KMPs). Page 1 Eligible Institutions for Relevant Experience • Market infrastructure institutions, capital market intermediaries, financial sector regulators, Fund Management Entities (FMEs), banks, finance companies, insurance companies and insurance intermediaries in an IFSC, in India or in foreign jurisdictions. • Consulting/advisory firms, CA firms, CS firms and CMA firms providing services relating to financial products to the institutions listed above. • Finance, accounts, secretarial or legal departments of private or public companies
Implementation & Configuration:
• Configure and customize the ServiceNow GRC modules, including Policy and Compliance Management, Risk Management, and Audit Management.
• Develop and manage GRC workflows, including automated processes for risk assessments, policy management, and audit management.
System Administration:
• Administer and maintain the ServiceNow GRC platform, ensuring it operates smoothly and effectively.
• Perform regular system updates, patches, and upgrades as needed.
Integration & Optimization:
• Integrate ServiceNow GRC with other ServiceNow modules (e.g., ITSM, ITOM) and third-party systems to enhance data flow and operational efficiency.
• Optimize the use of ServiceNow GRC to improve risk management processes and compliance tracking.
User Support & Training:
• Provide support to end-users, addressing issues, and answering queries related to ServiceNow GRC.
• Develop and deliver training materials and sessions to ensure users are proficient in utilizing the GRC platform.
Reporting & Analytics:
• Create and manage reports and dashboards to provide insights into GRC activities and performance.
• Analyse data to identify trends, potential risks, and areas for improvement.
• Ensure that the ServiceNow GRC application adheres to industry standards and best practices for governance, risk management, and compliance.
• Stay up-to-date with changes in regulations and compliance requirements that may impact the GRC processes.
To proceed further with your candidature, kindly fill out your details using the following application link:
https://forms.office.com/r/BHLcNbgtzJ
Roles & Responsibilities:-
- Develop and maintain enterprise data governance strategies, policies, and standards aligned with business goals
- Manage Microsoft Purview accounts, collections, and RBAC; optimize for large-scale environments (50TB+)
- Design metadata repositories and maintain business glossaries and data dictionaries
- Implement ingestion workflows via ADF, REST APIs, PowerShell, Azure Functions
- Define classification rules and sensitivity labels (PII, PCI, PHI); integrate with MIP, DLP, Insider Risk Management
- Define KPIs and dashboards to monitor data quality across domains
- Maintain business glossary with domain owners and stewards; enforce approval workflows
- Automate governance processes using PowerShell, Azure Functions, Logic Apps
- Set up dashboards for audit logs, compliance reporting, and metadata coverage
- Collaborate across business, IT, legal, and compliance teams for role alignment
Ideal Candidate:-
- Strong Data Governance Lead Profile with deep Microsoft Purview and enterprise governance expertise
- Mandatory (Experience 1): Must have 7+ years of experience in data governance and data management with at least the recent 3+ years of exposure in Microsoft Purview
- Mandatory (Experience 2): Must have experience defining, leading, and operationalizing an enterprise data governance framework — strategy, policies, and standards aligned to business goals and regulatory compliance.
- Mandatory (Tech skill 1): Must be proficient in Microsoft Purview — accounts, collections, RBAC, classification/labelling, DLP, Unified Catalog, Data Map, eDiscovery, Compliance Manager, and lifecycle/records management (ideally at large scale, 50TB+).
- Mandatory (Tech skill 2): Must be strong in metadata management, lineage mapping (e.g. ADF → Synapse → Power BI), data classification, and security governance (PII/PCI/PHI, sensitivity labels, MIP/DLP)
- Mandatory (Tech skill 3): Must have experience with data governance tools such as Informatica (Axon), Collibra, Atlan, or IBM IG Catalog.
- Mandatory (Tech skill 4): Must have experience integrating governance with the Azure data stack (Data Lake, Synapse, SQL DB, Power BI) and Snowflake, and automating via ADF, REST APIs, PowerShell, Azure Functions / Logic Apps.
- Mandatory (Tech skill 5): Must have experience defining data quality KPIs/dashboards, remediation workflows, and business glossary/stewardship (domain owners, approval workflows, metadata audits)
- Mandatory (Compliance): Must have strong knowledge of GDPR, CCPA, HIPAA, and SOX compliance requirements.
- Mandatory (Skill): Must be able to bridge technical governance with business and compliance goals, collaborating across business, IT, legal, and compliance teams, and driving governance training and change management
- Mandatory (Company): B2B Tech/Consulting/B2B Software
Position: Manager – Information Security
Experience: 10+ years
Location: Gurgaon
Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor
Key Responsibilities:
- Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
- Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
- Oversee security risk assessments, audits, and remediation plans across IT and business units.
- Manage a team of security professionals; mentor, coach, and evaluate performance.
- Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
- Lead incident response, RCA, and post-mortem reviews.
- Drive security awareness and training programs across the organization.
- Manage security budgets, vendor relationships, and contract negotiations.
Technical Skills:
- Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
- Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
- Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88 O2 74 97 43
Company Name: Money Honey Financial Services Pvt Ltd Company Profile: We are a one-stop financial services shop, widely known for quality of its advice, personalized service and cutting-edge technology. We started our journey in 2008. Currently we are serving more than 50,000 investors with a team of 100 members. Our core product offering is mutual fund, FD, Govt. Bonds, Debenture, etc. Role Description: This role directs the entire IT infrastructure, software engineering, and digital transformation strategy to support secure, scalable, and compliant technology and business operations.
Skills and Experience Required: 15+ years in IT delivery, application development, and enterprise architecture, with leadership tenure in regulated financial environments. Strong background in enterprise application architecture, cloud migrations (AWS/Azure/GCP), API integrations, and scalable database management using Microsoft and open source technology stack AI / ML Strategy: identifying and implementing high-impact use cases for Generative AI, Agentic AI, predictive analytics, and process automation Domain Expertise: Deep understanding of financial services (mutual fund, corporate fixed deposits, bonds etc.) and critical financial workflows
Responsibilities:
Strategic Technology Leadership: Define and execute the long-term technology vision, digital transformation roadmaps, and engineering strategies aligned with business growth.
Application Development & Delivery: Oversee IT development functions, software product engineering, and core transaction platforms ensuring high availability and minimal downtime
Infrastructure & Operations Management: Manage robust cloud and on premise infrastructure, network architecture, and 24/7 production support systems
Governance, Risk & Compliance (GRC):Ensure adherence to ISO standards, regulatory frameworks, data privacy laws, and stringent cybersecurity standards Location: Goregaon (W), Ram Mandir road, Mumbai Work Model:
Work from office (all working days)
Principal Officer (PO) – GIFT City
Location: GIFT City, Gandhinagar, Gujarat
Experience:- Minimum 5 Years
CTC:- ₹15-20
Job Description
We are looking for an experienced Principal Officer (PO) with a strong background in Financial Services, Fund Management, Investment Management or Capital Markets.
The candidate will be responsible for overseeing financial operations, ensuring regulatory compliance, and managing activities in accordance with applicable IFSCA regulations and guidelines.
Key Responsibilities
- Oversee fund management and financial services activities.
- Ensure compliance with applicable IFSCA regulations and guidelines.
- Monitor investment operations and financial activities.
- Handle regulatory reporting and documentation.
- Coordinate with internal teams and regulatory authorities.
- Support risk management and corporate governance activities.
Required Qualifications & Experience
- CA / CS / CMA / CFA / FRM / MBA Finance or relevant postgraduate qualification in Finance, Banking, Commerce, Economics, Law or Business Management.
- Minimum 5 years of relevant experience in Securities Markets or Financial Products.
- Experience in Fund Management, Investment Banking, Portfolio Management or Capital Markets.
- Knowledge of financial regulations and regulatory compliance.
- Relevant IFSCA-specified certification, wherever applicable.
Additional Eligibility: Candidates with at least 15 years of relevant Fund Management experience may also qualify with a Bachelor's Degree in any discipline, subject to applicable IFSCA regulations.
Interested candidates meeting the eligibility criteria are encouraged to apply.
Job Summary
We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.
The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.
Key Responsibilities
- Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
- Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
- Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
- Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
- Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
- Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
- Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
- Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
- Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
- Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.
Required Skills & Experience
- 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
- Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
- Experience with one or more enterprise risk technology platforms, such as:
- RSA Archer
- ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
- Other enterprise GRC and risk management platforms
- Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
- Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
- Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
- Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
- Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
- Strong communication, problem-solving, strategic planning, and decision-making skills.
Preferred Qualifications
- Experience in banking, financial services, insurance, or other regulated industries.
- Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
- Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
- Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.
Key Competencies
- Enterprise GRC Technology Strategy
- Technology Delivery & Programme Leadership
- Risk Platform Implementation and Optimization
- Stakeholder & Vendor Management
- Process Automation and Digital Transformation
- AI/GenAI and Analytics Enablement
- Global Team Leadership
- Governance, Controls and Continuous Improvement
IT Systems Engineer
Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure
Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership
Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at
scale.
The Mission
About Metadome.ai
Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the
Metaverse Standards Forum and the VR/AR Association.
About the Role
We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.
This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.
Core Responsibilities
● Identity & Access Management — JumpCloud:
○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.
○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.
○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.
○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.
○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.
● Google Workspace Administration — GWS:
○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.
○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,
and sharing / visibility policies.○
○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.
Endpoint & Threat Protection — Sophos:
○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and
servers.
○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.
○ Maintain endpoint encryption, web / application control, and device-hardening standards.
○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.
Network, Firewall & Wi-Fi:
○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.
○ Administer enterprise Wi-Fi and wired networks (switches, access points), including
RADIUS-backed authentication.
○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.
○ Implement network monitoring, intrusion detection, and centralized logging.
Hardware, Software & Asset Management:
○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and
decommissioning.
○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.
○ Maintain an accurate hardware and software inventory and asset register.
○ Manage software deployment, patch management, and license compliance.
Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:
○ Operate and continuously improve the company's Information Security Management System
(ISMS).
○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control
implementation, evidence collection, and continuous monitoring.
○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA
assessments.
○ Serve as a primary point of contact during external audits and customer security reviews.
○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response
runbooks.
○ Drive security-awareness and phishing-simulation programs across the organization.
IT Operations & Support:
○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.
○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.
○ Manage backups, disaster recovery, and business-continuity testing.
○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within
budget.
○ Maintain documentation, runbooks, and standard operating procedures.
○ Own and report on the IT budget and asset allocation.
Required Skills & Experience
● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems
below rather than purely supervisory exposure.
● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.
● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.
● Sophos — hands-on endpoint / XDR administration and threat response.
● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.
● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one
full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.
Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.
System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.
Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.
Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.
Preferred Qualifications
●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.
●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.
●Scripting and automation for IT operations (Bash, PowerShell, or Python).
●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.
●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.
Why Join Us
You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running
flawlessly.
📢 We're Hiring | Cybersecurity Consultant | Gurugram
Role: Cybersecurity Consultant
Experience: 7+ Years
Location: Gurugram, Haryana
We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.
🔹 Key Responsibilities
- Manage and strengthen security controls across enterprise IT infrastructure.
- Perform vulnerability assessments, remediation tracking and patch management.
- Monitor security alerts, investigate incidents and support threat hunting.
- Implement and manage SIEM, EDR and endpoint security solutions.
- Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
- Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
- Assist with backup, recovery, disaster recovery and business continuity activities.
- Maintain security documentation, remediation evidence and audit compliance.
🔹 Required Skills
- 7+ years of relevant experience in cybersecurity, security engineering or security operations.
- Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
- Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
- Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
- Strong understanding of incident response, threat hunting, network security and security remediation.
- Experience with EDR, IAM and enterprise security controls.
⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.
📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com
Follow CutshortShubham Vishwakarma
Full Stack Developer - Averlon