Security, Risk & Compliance Lead

RedDoorz; Dadri; On-site; INR 2,400,000 - 4,800,000; Full time

Job summary

RedDoorz in India seeks a Security, Risk & Compliance Lead with 6+ years of experience to drive the organisation's security and compliance initiatives and strengthen its security posture. The role involves developing information security strategy, managing audits, and leading incident investigations across cross-functional teams.

The ideal candidate will implement governance frameworks, lead VAPT programs, and collaborate with Engineering, Infrastructure, Product, and Business units to embed

Qualifications

• 6+ years of experience in Information Security and Compliance.
• Strong expertise in ISO 27001, SOC 2, PCI DSS, or equivalent frameworks.
• Hands-on experience in VAPT management.

Responsibilities

• Lead and execute the organisation's information security and compliance strategy.
• Drive compliance initiatives for ISO 27001, SOC 2, PCI DSS, or other relevant frameworks.
• Plan, coordinate, and manage internal and external compliance audits.
• Lead VAPT programs and ensure timely remediation of identified vulnerabilities.
• Conduct security risk assessments and establish mitigation plans.
• Perform vendor security assessments and third-party risk evaluations.
• Lead digital forensic investigations and support incident response activities.
• Define and implement security policies, standards, procedures, and governance frameworks.
• Monitor emerging threats and recommend appropriate controls.
• Collaborate with Engineering, Infrastructure, Product, and Business teams to embed security into processes.
• Drive security awareness and training programs across the organization.
• Manage security metrics, compliance dashboards, and executive reporting.
• Ensure continuous improvement of the organization's security posture.

Skills

Security governance

GRC

VAPT management

Vendor security assessments

Digital forensics

Incident response

Cloud security

Application security

Leadership

Stakeholder management

ISO 27001

SOC 2

PCI DSS

Job description

Job Title: Security, Risk & Compliance Lead

Experience: 6+ Years

Job Summary

We are seeking an experienced Security, Risk & Compliance Lead to drive the organisation's security and compliance initiatives. The ideal candidate will be responsible for developing and executing the overall information security strategy, ensuring compliance with industry standards, managing security assessments, leading incident investigations, and strengthening the organisation's security posture through proactive governance and risk management.

What We're Looking For

A proactive security leader who can balance business objectives with security requirements, lead cross-functional initiatives, and build a strong security-first culture across the organisation.

Key Responsibilities

• Lead and execute the organisation's overall information security and compliance strategy.
• Drive compliance initiatives for standards such as ISO 27001, SOC 2, PCI DSS, or other relevant frameworks.

• Plan, coordinate, and manage internal and external compliance audits.
• Lead Vulnerability Assessment and Penetration Testing (VAPT) programs, ensuring timely remediation of identified vulnerabilities.

• Conduct security risk assessments and establish risk mitigation plans.
• Perform vendor security assessments and third-party risk evaluations.
• Lead digital forensic investigations and support incident response activities.
• Define and implement security policies, standards, procedures, and governance frameworks.
• Monitor emerging security threats and recommend appropriate security controls.
• Collaborate with Engineering, Infrastructure, Product, and Business teams to embed security into business processes.

• Drive security awareness and training programs across the organization.
• Manage security metrics, compliance dashboards, and executive reporting.
• Ensure continuous improvement of the organization's security posture.

Required Skills & Expertise

• 6+ years of experience in Information Security and Compliance.
• Strong expertise in ISO 27001, SOC 2, PCI DSS, or equivalent compliance frameworks.
• Hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) management.

• Experience conducting vendor security assessments and third-party risk management.
• Strong understanding of digital forensics and incident response.
• Knowledge of security governance, risk management, and compliance (GRC).
• Experience developing and implementing enterprise-wide security policies and controls.
• Good understanding of cloud security (AWS/Azure/GCP) and application security principles.
• Excellent stakeholder management, communication, and leadership skills.

Preferred Qualifications

• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor, CEH, CHFI, or equivalent.

• Experience working with cloud-native environments and DevSecOps practices.
• Prior experience leading security and compliance initiatives across multiple business functions.