Information Security Engineer (GRC)

Bureau; Bengaluru; Sur place; INR 800 000 - 1 500 000; Plein temps

Avantages offerts par ce poste

Flexible work hours

Healthcare for you and your family

Opportunities for growth

Résumé du poste

A leading identity management firm in India seeks an experienced Information Security Engineer to oversee cloud security and governance programs. Responsibilities include hardening infrastructure, managing vulnerabilities, and maintaining compliance with standards like ISO 27001. Candidates should have 2-4 years of relevant experience, a degree in IT or Cybersecurity, and strong skills in IAM and cloud security services. The firm promotes an inclusive culture focused on growth, collaboration, and innovation.

Qualifications

• 2–4 years of experience in security engineering or GRC/compliance.
• Good understanding of IAM, least privilege, and encryption.
• Comfortable with writing/debugging basic scripts (Bash/Python).

Responsabilités

• Harden and monitor cloud & container infrastructure.
• Run vulnerability management and incident response.
• Maintain ISMS and support audits.

Connaissances

Cloud security

Security engineering fundamentals

Linux

Networking

IAM

Formation

Bachelor’s degree in Computer Science, IT, Cybersecurity or related

Outils

AWS

Terraform

CrowdStrike

Jira

Description du poste

Information Security Engineer (GRC)

Join to apply for the Information Security Engineer (GRC) role at Bureau.

About Bureau

Every day, billions of people interact, shop, and transact online - but behind the convenience lies a growing problem: digital fraud and mistrust. Global losses now exceed US$486B annually, and the questions businesses face are simple yet critical: “Who are you?” and “Can I trust you?” Bureau answers those questions. Bureau is an all‑in‑one platform for identity decisioning, fraud prevention and compliance requirements. Trusted for enhancing security and compliance, Bureau simplifies identity management for businesses. This is a place where we celebrate homegrown leaders and have an open‑door policy where your voice matters, your ideas flourish, and your potential knows no bounds. We are driven to put our best foot forward every day with confidence, growth, customer obsession and speed as our core values here at Bureau. Think of us as a launching pad for your growth. In just a few years, our knowledge graph has grown to 1 billion+ verified identities globally. Backed by Sorenson Capital, Blume, and PayPal Ventures, Bureau is not just scaling fast; we’re shaping the future of digital trust.

About the Role

We are looking for a Security Engineer who can own both the hands‑on technical security stack and our governance/compliance programs.

What you’ll be doing

• Harden and monitor our cloud & container infrastructure (AWS/EKS, endpoints, network).
• Run vulnerability management, security tooling and incident response.
• Maintain our ISMS and support audits (ISO 27001, SOC 2, RBI, DPDP).
• Work with DevOps to secure our AWS/EKS environment: IAM hardening, security groups, VPC, KMS, S3, RDS, etc.
• Review infra‑as‑code (Terraform/Helm) for security issues and misconfigurations.
• Own or co‑own key security tools: Endpoint/EDR (e.g., CrowdStrike, SentinelOne), Cloud security (CSPM/CNAPP, GuardDuty, Security Hub), Container/runtime security.
• Implement and maintain logging & monitoring for security events (CloudTrail, ALB/NLB logs, K8s logs, etc.) and integrate with SIEM.
• Vulnerability management lifecycle: Run periodic scans for cloud, endpoints, containers and apps; triage findings and drive closure.
• Coordinate external pentests, bug bounties and track remediation.
• Help investigate alerts, gather evidence, and contribute to root‑cause analysis and CAPA.
• Maintain and update incident response and audit documentation.
• Enhance the Information Security Management System (ISMS): policies, procedures, Statements of Applicability, risk register, control evidence.
• Support internal and external audits: ISO 27001, SOC 2, RBI/CERT‑In, Data Protection, etc.
• Prepare and manage audit evidence, observations, closure reports and certification documentation.
• Assist with risk assessments, maintain risk register, risk treatment plans and residual risk reviews.
• Conduct vendor security due diligence and maintain vendor security records (MSA, NDA, DPA).
• Help automate access reviews, asset inventory checks, and configuration compliance checks.
• Track control performance (vulnerability SLAs, access reviews, backup tests, etc.) and ensure gaps are documented and closed.
• Maintain security awareness and training trackers (onboarding, annual refreshers, phishing simulations).

What you’ll bring

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related discipline.
• 2–4 years of experience in security engineering, cloud security, or GRC/compliance (any mix, but must be comfortable with hands‑on).
• Good understanding of security engineering fundamentals: Linux, networking, IAM, encryption, least privilege.
• Cloud platforms (AWS preferred; GCP/Azure a plus) and their security services.
• Core frameworks: ISO 27001, SOC 2, basic risk management and audit lifecycle.
• Comfortable with writing/debugging basic scripts (Bash/Python) for automation and data extraction.
• Tools like Jira, Confluence, Excel/Sheets and at least one GRC/security platform (e.g., Scrut/Drata/Secureframe).
• Strong documentation skills and ability to talk to both engineers and non‑technical stakeholders.

Preferred (Good to Have)

• Willing to learn cloud security certifications (e.g., AWS Security+, AWS Cloud+, ISC2 CC).
• Experience with EDR/XDR tools, CSPM/CNAPP (e.g., Wiz, Prisma, Defender, Falco).
• Exposure to GDPR/DPDP or other data protection regulations.

Who You Are

• You enjoy both getting your hands dirty in logs, configs and cloud consoles, and keeping things clean in policies, risk registers and audit trackers.
• You’re structured and process‑oriented, but still pragmatic and capable of shipping improvements.
• You’re comfortable collaborating with DevOps, backend, data, HR and legal to get security actually implemented.
• You want to grow into either Security Engineering leadership (owning tools/architecture) or GRC leadership (owning audits and certifications) over the next few years.

What working at Bureau looks like

At Bureau, work is about building something meaningful, together. Some days it’s brainstorming around a whiteboard, other times it’s an idea sparked over chai or in a hallway chat. We move fast, give ownership to those closest to the problem, and turn ideas into action quickly. Our values shape how we work and win together. We believe in teamwork and respect that build strong collaborations, urgency that keeps us close to customer needs, and a solution mindset that drives innovation. With transparency at the core, we strive for excellence in everything we do and bring relentless drive to achieve impactful outcomes. This is what working at Bureau looks like – fast, focused, and built on trust.

Flexibility is built into how we work, helping you balance deep focus with collaboration. Learning never stops: through books, courses, and knowledge‑sharing. And well‑being matters too, with healthcare for you and your family.

Here, you don’t just build products that protect millions – you build trust, grow your skills, and work with people who’ve got your back.

Why Join Bureau?

• Part of a mission with real global impact: creating digital trust that allows businesses and people to transact safely.
• Work with purpose: Build tools that reduce fraud, expand access to credit, and protect people from digital harm.
• Cutting‑edge tech: Solve problems using AI, risk intelligence, and graph‑based systems at global scale.
• Massive scale, real‑world impact: Your work will directly contribute to protecting millions of people and businesses worldwide.
• Room to grow: Join a company scaling 4 × YoY, where ownership and bold ideas are rewarded.
• Culture that empowers: Flexible work hours, fast‑paced environment, and a team that values speed and innovation.
• Life at Bureau: From offsites and team outings to Friday snacks and friendly table tennis rivalries; we make sure there’s energy, fun, and plenty of coffee.

Seniority level

Associate

Employment type

Full‑time

Job function

Information Technology

Industries

Technology, Information and Internet

Referrals increase your chances of interviewing at Bureau by 2×.

Get notified about new Information Security Engineer jobs in Bengaluru, Karnataka, India.