Security Lead (GRC & AppSec)

Innovapptive Inc; Hyderabad; On-site; INR 2,000,000 - 3,000,000; Full time

Benefits offered by this job

Competitive compensation

Equity tied to performance

Access to cutting-edge tools

Job summary

Innovapptive Inc is looking for a Security Lead (GRC & AppSec) to establish a security program from zero and lead a 3‑person team. You will be responsible for achieving SOC 2 compliance and implementing security measures across various tools and platforms.

This role requires 6+ years in information security and a proven track record in building security frameworks in growth-stage SaaS environments. Competitive compensation and growth opportunities towards a Head of Security role are offered.

Qualifications

• 6+ years information security with 2+ years leading programs.
• Expertise in SOC 2 and ISO 27001.
• Knowledge of SAST/DAST/SCA, OWASP Top 10.

Responsibilities

• Build security programs from ground up.
• Ensure SOC 2 Type II readiness.
• Manage incident response playbook.

Skills

Information security leadership

SOC 2 compliance

GRC framework

AppSec knowledge

Risk communication

Education

6+ years in information security

Tools

SonarQube

AWS

Burp Suite

Job description

Security Lead (GRC & AppSec)

Location: Hyderabad, India

Employment Type: Full-Time; Salaried

Compensation: Base Salary, Bonus, Stock Options, Medical

About Innovapptive

Innovapptive is an enterprise SaaS company building an AI-powered Connected Worker Platform for industrial organizations. It connects frontline workers, back‑office systems, and assets in real time to drive safety, reliability, and operational productivity.

Why This Role Exists

Innovapptive has zero security engineering today. Customers across regulated industries are asking for SOC 2 compliance, pen test reports, and security posture documentation. We need a founding security hire to build Security & Compliance from scratch: GRC, AppSec pipeline, vulnerability management, and a security culture, and to lead a 3‑person team.

What You Own

• Security program from zero: GRC framework, risk register, policies, vendor assessments.
• SOC 2 Type II readiness.
• AppSec pipeline: SAST/SCA in CI/CD. 100% repo coverage.
• Vulnerability management: ≥95% Crit/High resolved within 7/30 days.
• Security review for high‑risk changes.
• Incident response playbook.
• Security awareness and training.
• Team building: AppSec Engineer now, Infra/Cloud in Q3.

Requirements

• 6+ years information security with 2+ years leading programs.
• GRC: SOC 2, ISO 27001. Audit coordination.
• AppSec: SAST/DAST/SCA, OWASP Top 10, threat modeling.
• Security tooling in CI/CD.
• Communicate risk in business terms.
• Building security from zero in growth‑stage SaaS.

Nice to Have

• CISSP, CISM, CEH, or AWS Security Specialty.
• Regulated industries (energy, utilities, manufacturing).
• SAP security patterns.
• PenTest experience.
• AI/ML security.

You Will Be Measured On

• SAST/SCA 100% repos within 60 days.
• ≥95% Crit/High resolved within 7/30 days.
• SOC 2 audit‑ready by year end.
• Playbook v1 within 30 days.
• Team at 3 HC by Q3.
• ≥90% quarterly audits satisfactory.

Tech Stack & Tools

SAST/SCA: SonarQube, Snyk, Dependabot, GitLab SAST

DAST: OWASP ZAP, Burp Suite

Infrastructure: AWS (IAM, GuardDuty, Security Hub), Docker, K8s

Identity: SAML, OAuth 2.0, RBAC

Compliance: Vanta/Drata

Monitoring: CloudWatch, Sentry, Mixpanel

Compensation & Growth

Reports to VP SRE. Founding security role. Path to Head of Security / CISO.

What We Offer

• Competitive compensation and equity tied to measurable impact on AI accuracy and performance.
• A platform to shape the semantic intelligence layer of a category‑defining industrial SaaS company.
• Access to cutting‑edge AI, data, and observability toolchains for continuous learning and innovation.

Innovapptive does not accept and will not review unsolicited resumes from search firms.

Innovapptive is an equal opportunity employer and is committed to a diverse and inclusive workplace. Qualified applicants will receive consideration for employment without regard to race, color, religion or creed, alienage or citizenship status, political affiliation, marital or partnership status, age, national origin, ancestry, physical or mental disability, medical condition, veteran status, gender, gender identity, pregnancy, childbirth (or related medical conditions), sex, sexual orientation, sexual and other reproductive health decisions, genetic disorder, genetic predisposition, carrier status, military status, familial status, or domestic violence victim status and any other basis protected under federal, state, or local laws.