Corporate Risk and Compliance - Associate II

Zeta; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Zeta, a leading banking technology company, is hiring an Level 2 Information Security professional in Bengaluru. The role bridges hands-on security operations with governance, risk, and compliance, requiring collaboration across teams and meticulous remediation tracking.

The ideal candidate brings 3–5 years in information security, with BE/B.Tech in CS and certifications in cloud/security and network security. Strong communication and documentation skills are essential for success.

Qualifications

• 3 to 5 years of experience in Information Security, Risk & Compliance, Endpoint Security, Network Security or Technical GRC role.
• BE/B.Tech in Computer Science or equivalent.
• Certifications in security domains are required or preferred, including cloud/security fundamentals and network security credentials.

Responsibilities

• Develop and maintain security baselines and configuration checklists for endpoints, networks, and email security.
• Coordinate with technical teams to perform periodic security assessments and track remediation.
• Support vulnerability assessments and penetration testing, including validation of findings and remediation.
• Prepare security assessment reports, SOPs, and compliance evidence.
• Assist audits by coordinating with Audit, Compliance, and technical teams.
• Track security findings to closure within agreed timelines.
• Communicate gaps and remediation actions to stakeholders.

Skills

Microsoft Security

Networking

Email Security

OS Security

Scripting

Security Assessments

Security Frameworks

Documentation

Education

BE/B.Tech in CS or equivalent

Job description

About us: Build the future of banking.

Zeta is a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences.

About us: Build the future of banking.

Zeta is a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences.

Our impact runs at real-world scale. Today, over 25 million cards are live on Zeta-powered platforms across 7 countries, supported by a passionate team of 1,700+ Zetanauts across India, the US, EMEA, and Asia. Backed by SoftBank Vision Fund, Mastercard, and other reputed strategic investors, we reached a valuation of $2 billion in 2025.

Our focus is on establishing product lines that focus on key outcomes by addressing real customer pain points, modernizing legacy systems, and strengthening core fundamentals. As a result, our systems and platforms support a wide range of banking and payments capabilities, including:

• Tachyon, our cloud-native banking stack built for population-scale systems
• Cipher, our unified authentication platform for secure, high-volume banking environments
• Digital Credit as a Service, enabling banks to launch credit lines on UPI
• Elena, our intelligent and conversational AI platform for banking
• Pixel, India’s first digital-native credit card, launched in partnership with HDFC Bank, for whom we also revamped their PayZapp mobile app: Winner of the Celent Model Bank Award for Payments Innovation 2024
• Sparrow, the leading card experience for non-prime cardholders in the US

…and more across cards, payments, lending, and core banking.

We are an engineering-first organization that values ownership, bias for action, and long-term thinking. Together, we solve some of the hardest problems in banking tech. Our culture is built around trust, collaboration, and creating the conditions for you to drive impact proportionate to your potential. Reinforcing our commitment to creating an inclusive and supportive workplace, we have been consistently recognized as a Great Place to Work.

If you want to build cutting-edge banking tech that enables banks to serve millions reliably, securely, and at a population scale, Zeta is your playground.

If you would like to learn more about how we have grown and evolved over the years, watch our journey here. You can also explore our website and follow us on LinkedIn, Instagram, YouTube, and X.

About the Role:

We are seeking a highly capable Level 2 Information Security professional who effectively bridges the gap between hands-on technical operations and governance. This role demands a unique combination of technical expertise across endpoint, network, and email security systems, paired with a Governance, Risk, and Compliance (GRC) mindset.

Beyond managing technical controls, the ideal candidate must be an exceptional communicator capable of collaborating across diverse internal teams, managing security risk exceptions, and meticulously tracking open compliance and remediation items to closure.

Responsibilities:

• Develop and maintain security baselines and configuration checklists for Windows/macOS endpoints, corporate networks, firewalls, Microsoft 365, email security, and Data Loss Prevention (DLP).
• Work with respective technical teams to perform periodic security assessments, identify gaps, and track remediation.
• Perform or support vulnerability assessments and penetration testing, including validation of findings and remediation.
• Prepare and maintain security assessment reports, technical documentation, SOPs, and compliance evidence.
• Support internal and external audits by coordinating with Audit, Compliance, and technical teams.
• Track security findings, vulnerabilities, and audit observations to ensure closure within agreed timelines.
• Communicate identified security gaps and recommended remediation actions to relevant stakeholders.

Skills:

Hands-on experience in at least one security domain, with a good understanding of other enterprise IT security domains.

• Microsoft Security: Understanding of Microsoft 365 security, Intune, Microsoft Defender, and identity access controls.
• Networking: Understanding of LAN, WLAN, WAN, firewalls, network security, and secure configurations.
• Email Security: Understanding of email routing, SPF, DKIM, DMARC, and anti-phishing controls.
• Operating Systems: Good understanding of Windows, Linux, and macOS security and hardening.
• Scripting: Basic scripting knowledge in Python, PowerShell, or Bash/Shell for automation and log analysis.
• Security Assessments: Understanding of vulnerability assessment, penetration testing, endpoint security, and Identity and Access Management (IAM).
• Security Frameworks: Familiarity with CIS Benchmarks, NIST, PCI DSS, and SOC 1/SOC 2 requirements.
• Documentation: Ability to prepare security checklists, assessment reports, SOPs, and audit evidence.

Experience and Qualifications:

• 3 to 5 years of experience in Information Security, Risk & Compliance, Endpoint Security, Network Security or Technical GRC role.
• Bachelor of Technology (BE/B.Tech) in Computer Science or equivalent
• Certifications (At least one of the following or equivalent is required):
• Identity & Cloud Security: Microsoft Certified Associate (SC-200, SC-300, or SC-900).
• Security Fundamentals: ISC² CC (Certified in Cybersecurity), CompTIA Security+ or CEH (Certified Ethical Hacker).
• Network Security: CCNA (Cisco), Certified Security Associate (Cisco/Check Point), NSE 4 (Fortinet), or JNCIA (Juniper).

Zeta is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We encourage applicants from all backgrounds, cultures, and communities to apply and believe that a diverse workforce is key to our success.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.