Lead Associate, Information Security

Betanxt Inc; Bengaluru; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

BetaNXT is seeking a Lead Associate / Cybersecurity Engineer to own the vulnerability management program and contribute to PKI/Certificate Lifecycle Management and DLP/Data Classification initiatives. This execution-focused role requires coordinating remediation across engineering teams and driving timely outcomes.

The position supports RBVM/CTEM evolution, certificate governance, and policy tuning, with a focus on reducing risk and improving security postures across the organization.

Qualifications

• Experience in vulnerability management platforms (e.g., Qualys, CyCognito) and security tooling.
• Familiarity with PKI/Certificate Lifecycle Management and data loss prevention.
• Ability to coordinate remediation across multiple engineering teams and timelines.

Responsibilities

• Lead Vulnerability & Exposure Management day-to-day activities across findings and stakeholders.
• Build remediation plans with BU teams and drive them to closure with urgency.
• Contribute to RBVM/CTEM program governance and reporting to leadership.
• Support PKI/CLM tooling, certificate inventories, renewals, and expirations.
• Assist with DLP policy tuning and data classification efforts.

Skills

Vulnerability Management

PKI/CLM

DLP Controls

Data Classification

Incident Response

Job description

This role is being created to backfill a resigning Senior Associate, Information Security with 3.5 yrs of experience at BetaNXT, and it is being redefined with a sharper mandate. The Lead Associate / Cybersecurity Engineer will own day-to-day execution of BetaNXT's Vulnerability & Exposure Management program — the single highest-priority function in this role — while also contributing to PKI/Certificate Lifecycle Management and Data Loss Prevention (DLP) / Data Classification initiatives. This is an execution and delivery role as much as a technical one: success depends on the ability to organize, prioritize, and personally drive remediation work across engineering teams that do not report to this person.

We are looking for someone with genuine passion, ambition — someone who treats this role as a launchpad to grow into broader security engineering and program leadership responsibility, not a fixed job description.

Key Responsibilities

1. Vulnerability & Exposure Management — Primary Focus

• Serve as the day-to-day counterpart to DXC's Vulnerability Management lead, running a recurring, evidence-based triage cadence across findings from Qualys VMDR/TruRisk, GitLab Ultimate (SDLC/dependency findings), and CyCognito (external attack surface).
• Segment and prioritize triaged findings by business unit (Beta, Maxit, Mediant, Delta Data), applying asset criticality, exploitability signals (EPSS/KEV), and business context rather than raw severity counts alone.
• Build remediation plans with each BU's technology and development engineering teams, and personally drive them to closure — this requires the judgment and persistence to negotiate realistic timelines and the persuasion skills to keep remediation moving with teams that have competing priorities and no reporting relationship to this role.
• Apply project/delivery-management discipline to the remediation portfolio: maintain trackers and burn-down views, flag at-risk items early, and elevate clearly and factually to BU and technology leadership when a commitment is slipping.
• Contribute to the ongoing evolution of BetaNXT's Risk-Based Vulnerability Management (RBVM) / Continuous Threat Exposure Management (CTEM) program, including per-BU scorecards and monthly VM governance reporting to CLO/GRC leadership.

2. PKI & Certificate Lifecycle Management

• Support the operation and continuous improvement of enterprise PKI and Certificate Lifecycle Management (CLM) tooling (e.g., Venafi), including issuance, automated renewal, and revocation workflows.
• Maintain an accurate certificate inventory across on-prem and cloud environments; proactively identify and remediate certificates that are expired, expiring, or improperly configured before they cause a production or client-facing incident.
• Coordinate with DXC and internal infrastructure owners on certificate-related change work and the broader CLM ownership transition.
• Support configuration, tuning, and expansion of DLP controls (e.g., Microsoft Purview) across email, endpoint, and cloud channels.
• Assist with data classification efforts, partnering with BU and compliance stakeholders to identify, label, and appropriately protect sensitive client and company data.
• Investigate DLP alerts and turn recurring patterns into concrete policy or control refinements that reduce noise without reducing coverage.

3. Data Loss Prevention & Data Classification

• Support configuration, tuning, and expansion of DLP controls (e.g., Microsoft Purview) across email, endpoint, and cloud channels.
• Assist with data classification efforts, partnering with BU and compliance stakeholders to identify, label, and appropriately protect sensitive client and company data.
• Investigate DLP alerts and turn recurring patterns into concrete policy or control refinements that reduce noise without reducing coverage.

4. Knowledge Base & Documentation

• As bandwidth allows, streamline and document InfoSec processes, runbooks, and SOPs — starting with VM, PKI/CLM, and DLP workflows — so institutional knowledge is captured and transferable rather than held by one person.

5. Program Support & Professional Growth

• Participate in incident response, security architecture reviews, and audit/compliance evidence requests as needed.
• Proactively pursue adjacent skills and stretch responsibilities (cloud security, IAM, security architecture, automation) as the program and this role mature — we are looking for someone who will outgrow the initial job description.

Must support US Eastern Timezone hours

JD - InfoSec Lead Associate - Cybersecurity Engineer (9-8-2026).docx