Senior Cyber Security Engineer

Bigshare Services; Mumbai; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Bigshare Services is seeking a dedicated Cyber Security Engineer with a strong emphasis on compliance to join our team in Mumbai. The role focuses on aligning security practices with regulatory standards and internal policies, and on developing and maintaining security policies.

The ideal candidate will manage audits, vendor relations, and implement technical controls such as firewalls and IDS. You will work closely with IT and senior management to ensure audit readiness and risk mitigation.

Qualifications

• Experience in regulatory, audit, or compliance roles in cyber security.
• Experience managing security programs and aligning with senior management.
• Familiarity with incident response, root cause analysis, and remediation.
• Strong policy development and documentation skills.

Responsibilities

• Develop and manage cyber security policies and incident response plans.
• Oversee internal and external cyber security audits and ensure remediation.
• Manage vendor and auditor relationships and third-party risk.
• Implement and maintain security controls including firewalls and IDS/IPS.
• Monitor security posture and generate compliance reporting.
• Collaborate with IT and management to align security programs.
• Administer VMs and AD to enforce security policies.

Skills

Policy development

Audits & compliance

Incident response

Risk management

Security operations

Vulnerability assessment

Tools

Firewall administration

IDS/IPS

Antivirus management

Active Directory security

Virtual machines

Job description

We are seeking a dedicated Cyber Security Engineer with a strong emphasis on compliance to join our team. This role is pivotal in ensuring our organization's cyber security practices align with regulatory standards, industry best practices, and internal policies. The ideal candidate will be responsible for developing and maintaining security policies, managing relationships with auditors and vendors, and implementing technical controls to safeguard our systems. This position requires a blend of technical expertise and compliance knowledge to mitigate risks and maintain audit readiness.

Key Responsibilities:

Policy Development and Management: Create, review, and update cyber security policy documents, including incident response plans, data protection policies, and compliance frameworks. Ensure all policies comply with relevant regulations industry-specific standards.

• Audit and Compliance Oversight: Oversee and manage cyber security audits, including internal assessments and external engagements with auditors. Evaluate security controls, provide recommendations to management, and ensure remediation of identified vulnerabilities. Conduct thorough security assessments to identify risks in systems and infrastructure.

• Vendor and Auditor Management: Manage relationships with cyber security vendors and auditors, including contract negotiations, performance evaluations, and coordination of audits. Ensure vendor compliance with security requirements and oversee third-party risk assessments.

• Technical Security Implementation: Implement and manage security tools such as firewalls, antivirus software, and intrusion detection systems. Develop and maintain firewalls to safeguard systems from unauthorized access.

• Incident Response and Monitoring: Lead computer incident investigations, determine root causes, and implement corrective actions. Ensure ongoing security scanning, monitoring, and compliance reporting.

• Risk Management and Training: Collaborate with IT, audit, and senior management to align security programs. Provide training on compliance and security best practices to enhance organizational awareness.

• System Administration: Work on virtual machines (VMs) and Active Directory (AD) environments to enforce security policies. Maintain antivirus solutions and ensure basic firewall configurations are in place to protect network integrity.

Prior work in regulatory, audit, or compliance roles within cyber security .

Experience managing security programs and ensuring alignment with senior management.

Familiarity with incident response, root cause analysis, and remediation strategies.

This role offers an opportunity to be the key point person for security, ensuring data remains protected against threats while maintaining compliance.