DevSecOps & Compliance Manager

Etp Group; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Pick & Drop facility from Saki Naka Metro

Complimentary breakfast

Medical insurance coverage

Job summary

A leading AI-first SaaS company in Mumbai seeks a DevSecOps & Compliance Manager to enhance its cloud security posture and oversee compliance initiatives. You will manage DevSecOps practices across CI/CD pipelines while ensuring adherence to industry standards like ISO 27001. The ideal candidate will possess robust DevSecOps expertise with a strong background in software development and cloud security, ensuring the organization maintains a secure environment and meets compliance requirements.

Qualifications

• 6+ years relevant experience in DevSecOps and compliance.
• Prior experience as a Software Developer is mandatory.
• Strong understanding of CI/CD pipelines and cloud security.

Responsibilities

• Lead DevSecOps practices across CI/CD pipelines.
• Strengthen cloud security posture using AWS/Azure/GCP.
• Drive compliance initiatives including ISO 27001.

Skills

DevSecOps expertise

Cloud security (AWS/Azure/GCP)

CI/CD pipelines knowledge

Compliance governance

Software development experience

Risk assessment

Vulnerability Assessment & Penetration Testing

Strong communication skills

Tools

SonarQube

Job description

Company Description: ETP Group is an AI-first SaaS company serving the Retail and e-Commerce industries across Asia Pacific. With 39 years of trust in the market, it supports 500+ brands in 17 countries through enterprise-grade platforms. ETP’s cloud-native solutions—ETP Unify and Ordazzle—cover POS, CRM, Inventory, Promotions, PIM, OMS, WMS, LMS, and seamless marketplace integration. For large-format retail, ETP V5 offers a hybridomni-channel suite. Built on secure, scalable M.A.C.H architecture. ETP delivers frictionless, personalized experiences across channels. Its intuitive, asset-light platforms accelerate cloud transformation, reduce IT overhead, and help retailers enhance CX, drive growth, and lead in a fast-evolving commerce environment.

Designation: DevSecOps & Compliance Manager

Department: IT & Security Compliance

Work Mode: Work from office

Working Days: Monday to Friday

Experience: 6+ Years

Job Description:

About The Role:

We are looking for a highly skilled DevSecOps & Compliance Manager to lead secure development practices, strengthen cloud security posture, and drive compliance initiatives across the organization. The role requires a strong blend of hands‑on DevSecOps expertise, cloud security, and compliance governance, ideally in a SaaS/product-based environment.

Key Responsibilities:

• Implement and manage DevSecOps practices across CI/CD pipelines
• Strengthen and maintain cloud security posture (AWS/Azure/GCP)
• Drive compliance initiatives including ISO 27001 and DPDPA
• Manage Vulnerability Assessment & Penetration Testing (VAPT)
• Lead risk assessment, remediation, and audit readiness
• Establish security monitoring and awareness programs
• Develop and maintain security policies, procedures, and documentation

Experience & Skills:

• 6–12 years of relevant experience
• Prior experience as a Software Developer is mandatory
• Exposure to SaaS / product-based organizations preferred
• Strong understanding of CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI)
• Hands-on experience in DevSecOps implementation & secure coding practices
• Expertise in cloud security (AWS / Azure / GCP)
• Working knowledge of ISO 27001 controls & audits
• Understanding of DPDPA (India Data Protection Law)
• Experience in risk assessment, audit handling, and compliance frameworks
• Proven experience in VAPT management
• Strong communication and stakeholder management skills

Desired Skills & Certifications

• Experience implementing end-to-end DevSecOps frameworks
• Certifications in DevSecOps / Security (preferred)
• Hands-on with tools like SonarQube and security automation in CI/CD
• Knowledge of Zero Trust Architecture
• Experience with threat modeling (STRIDE, DREAD)
• Basic knowledge of incident response & security forensics
• Ability to present to leadership and external auditors

Perks and benefits

• Pick & Drop facility from Saki Naka Metro.
• Complimentary breakfast.
• Medical insurance coverage.