On-site

Darwinbox Digital Solutions Pvt. Ltd.; Bengaluru; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Darwinbox Digital Solutions Pvt. Ltd. in Bengaluru is seeking an Information Security Leader to operate at the intersection of technology, compliance, and customer trust for enterprise clients across regulated industries.

The role demands deep security expertise and a strategic mindset. You will lead customer-facing security conversations, audits, and vendor assessments, and partner with Engineering, Product, Legal, and Sales to translate strategy into concrete actions while maintaining strong

Qualifications

• 8–12 years in information security with 3+ years in leadership.
• Experience in B2B SaaS serving regulated industries preferred.
• Hands-on cloud security across AWS, GCP, or Azure.
• Proven ability to conduct audits, vendor assessments, and security questionnaires.

Responsibilities

• Act as primary security contact for enterprise clients during procurement and reviews.
• Lead customer-facing security conversations including RFPs and risk assessments.
• Represent security posture to clients in audits and regulatory inquiries.
• Oversee cloud security, SDLC integration, vulnerability management, and incident response.
• Partner with Sales, Legal, and Product to define security roadmap.

Skills

Leadership

Cloud security

Vendor risk assessments

Security audits

Regulatory compliance

Risk management

Cross-functional collaboration

Security architecture

Tools

SIEM

Endpoint protection

IAM

DLP

Job description

We are looking for an Information Security Leader to operate at the intersection of technology, compliance, and customer trust. This is a high-visibility, customer-facing role where you will represent our security posture to enterprise clients across regulated industries such as banking, insurance, and financial services.

Key Responsibilities

• Act as the primary security point of contact for enterprise clients during procurement, contract discussions, and periodic reviews
• Lead customer-facing security conversations including RFPs, vendor risk assessments, and questionnaires
• Build strong relationships with client stakeholders (CISOs, Risk, Compliance teams)
• Represent the organization during customer audits, due diligence, and regulatory inquiries

Compliance & Risk Management

• Own key compliance frameworks (DPDP Act, ISO 27001, SOC 2, RBI/IRDAI guidelines)
• Conduct risk assessments, gap analyses, and drive remediation planning
• Manage contractual security requirements, including DPAs and security clauses
• Monitor regulatory changes and ensure internal controls remain aligned

Cloud & Technical Security

• Oversee cloud security across AWS, GCP, or Azure (access control, encryption, network security, logging)
• Integrate security into SDLC, CI/CD pipelines, and product releases
• Lead vulnerability management, penetration testing, and incident response planning
• Manage security tools such as SIEM, endpoint protection, IAM, and DLP

Strategic Leadership & Execution

• Partner with external security firms to define and execute the security roadmap
• Translate strategy into actionable plans for engineering and product teams
• Build and mentor the internal security function
• Collaborate cross-functionally with Sales, Engineering, Legal, and Product teams
• Evaluate vendors and security tools, including cost-benefit analysis
• Report security KPIs, risk posture, and compliance status to leadership

Requirements

Experience

• 8–12 years in information security, with 3+ years in a leadership role
• Experience in B2B SaaS or technology companies serving regulated industries preferred
• Proven experience in customer-facing security roles
• Hands-on expertise in cloud security (AWS, GCP, or Azure)

Knowledge & Skills

• Strong understanding of compliance frameworks (DPDP, ISO 27001, SOC 2 Type II, RBI, IRDAI)
• Solid risk management and assessment capabilities
• Ability to independently manage security audits, questionnaires, and vendor assessments
• Experience reviewing security clauses in contracts and DPAs
• Knowledge of modern security architecture (Zero Trust, least privilege, encryption, data residency)

Attributes

• Excellent communication skills across technical and non-technical audiences
• Commercial awareness of security as a business enabler
• Ability to work in fast-paced, ambiguous environments
• Strong collaboration across cross-functional teams

Preferred Certifications

CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or equivalent

Why This Role Matters

Security is critical to building trust with enterprise clients in regulated industries. This role directly impacts customer confidence, revenue growth, and overall risk management, with high visibility and influence across senior leadership and company-wide decisions.