Security Lead_ Trivandrum

VGreenTek; Thiruvananthapuram; On-site; INR 3,200,000 - 5,200,000; Full time

Job summary

VGreenTek in Thiruvananthapuram, Kerala, is seeking a Security Lead with 10+ years in information security, including 4+ years in a leadership role. This role oversees security governance, secure SDLC, vulnerability management, IAM and risk controls, reporting to the Engineering Manager.

Immediate joining and full-time employment in office. The ideal candidate will align with ISO 27001 and government security standards, possess CISSP or equivalent, and lead cross-functional security workstreams

Qualifications

• Bachelor's degree in CS/IT or related field; CISSP or equivalent seniority.
• ISO 27001 LA/LI preferred; CISM/equivalent experience advantageous.
• Experience leading security workstreams and audits across teams.

Responsibilities

• Own security governance across applications, platforms, and APIs.
• Define and govern Secure SDLC standards and DevSecOps practices.
• Oversee vulnerability management and remediation verification.
• Provide IAM, data protection guidance and risk assessment.
• Lead security workstreams and support audits and client assurance.

Skills

Security governance

Security architecture

Secure SDLC

DevSecOps

Vulnerability management

Penetration testing

IAM

Data protection

Risk management

Leadership

Compliance

CISSP

Education

Bachelor's degree in CS/IT

CISSP certification

ISO27001 LA/LI preferred

Tools

HSM

PKI

CI/CD tooling

Job description

Title: Security Lead
Location: Thiruvananthapuram, Kerala
Job Type: Full Time / Employment
Work Mode: Work from Office
Joining: Immediate
Department: Cyber Security
Experience: 10+ years in Information Security, including 4+ years in a Security Leadership role

Required Skills:

• Security Governance & Architecture: Own application, platform, and software security across all Scrum pods; establish the security control framework aligned with ISO 27001 and applicable government security standards, covering application/infrastructure architecture, authentication, authorization, data protection, APIs, dependencies, deployment, and security controls.
• Secure SDLC & DevSecOps: Define and govern Secure SDLC standards, secure coding practices, SAST/DAST gates, dependency scanning, threat modelling, CI/CD security gates, and provide technical security direction to DevOps for implementing pipeline security controls across all delivery pods.
• Vulnerability, Testing & Remediation: Own vulnerability management including scanning cadence, vulnerability triage, remediation tracking, security reviews, penetration-test scoping, and remediation verification; identify and manage security risks and ensure appropriate controls are implemented before release.
• IAM, Data Protection & Risk Management: Provide technical direction on IAM, authentication, authorization, cryptography, encryption, key management, application/infrastructure security, and formal security risk assessment/treatment planning; maintain the security risk register and elevate material risks to the Engineering Manager.
• Leadership, Compliance & Qualifications: Lead security workstreams across multiple teams and collaborate with Enterprise Architecture, Engineering, DevOps, QA, and development teams; support audits, accreditation, and client security assurance. Bachelor's degree in CS/IT or related field; CISSP required or equivalent demonstrable seniority, with ISO 27001 LA/LI preferred. CISM/equivalent, government/national-security or border/identity platform experience, and HSM/PKI design are advantageous.

DEVOPS,QA,DATA PROTECTION,KEY MANAGEMENT,CISSP,CI/CD