Security & Compliance Engineer

Kognitive Networks Inc.; Chennai District; On-site; INR 1,200,000 - 1,600,000; Full time

Benefits offered by this job

Group health insurance

Flexible working hours

Hybrid work model

Job summary

Kognitive Networks Inc. is seeking a skilled Security & Compliance Engineer located in Chennai, India. The successful candidate will have expertise in SOC 2 and ISO 27001, with responsibilities including managing compliance programs and collaborating with engineering teams to integrate security practices into development.

The position offers group health insurance, flexible working hours, and a hybrid work model, allowing for an engaging yet adaptable work environment.

Qualifications

• Bachelor’s in Computer Science, Information Technology, Engineering, or equivalent.
• Relevant certifications (CISSP, CISA, ISO 27001 Lead Auditor/Implementer) strongly preferred.
• Hands-on experience with SOC 2 and ISO 27001.

Responsibilities

• Support SOC 2 Type II observation period and manage evidence collection.
• Assist in ISO 27001 ISMS buildout, gap analysis, and audit preparation.
• Finalize and periodically review security policies.
• Administer Vanta GRC platform and configure Jira/Confluence for Agile development.

Skills

SOC 2

ISO 27001

Agile practices

Incident response

Root cause analysis

Jira

Confluence

Vendor security management

Education

Bachelor’s in Computer Science, Information Technology, Engineering, or equivalent

Relevant certifications (CISSP, CISA, ISO 27001 Lead Auditor/Implementer)

Tools

Vanta GRC platform

Jira

Confluence

Job description

Bachelor’s in Computer Science, Information Technology, Engineering, or equivalent. Relevant certifications (CISSP, CISA, ISO 27001 Lead Auditor/Implementer, or equivalent) strongly preferred.

Location:

We are looking for a hands‑on Security & Compliance Engineer with direct experience in SOC 2 and ISO 27001 to join our team. The role requires someone who can hit the ground running with zero ramp‑up time, able to support an ongoing SOC 2 observation period internally and externally, while working closely with internal stakeholders and external security professionals. You will own compliance program execution, finalize and maintain security policies and controls, coordinate with auditors, and manage evidence collection in our GRC platform (Vanta).

Beyond audit support, you will work closely with our engineering team to embed compliance into our software development and governance using Agile practices. This includes supporting incident response, root cause analysis (RCA), and secure software development lifecycle (SSDLC) processes. You will take on roles in administration for Jira and Confluence, configuring and refining workflows, project boards, and documentation standards that support both development velocity and audit readiness.

Responsibilities include:

• Active SOC 2 Type II observation period support and evidence management
• ISO 27001 ISMS buildout, gap analysis, and audit preparation
• Security policy finalization and periodic review
• Vanta GRC platform administration
• Jira/Confluence configuration for Agile development, SSDLC, IR, and RCA workflows
• Vendor security questionnaire support and third‑party risk management
• PCI DSS readiness (future scope)

Group health insurance, flexible working hours, and a hybrid work model.