Senior Information Security Engineer

MoEngage; Bengaluru; Hybrid; INR 1,500,000 - 2,500,000; Full time

Job summary

MoEngage is a fast-growing insights-led customer engagement platform trusted by top brands. We are seeking an InfoSec Engineer to manage risk posture, drive global compliance, and engage with auditors to obtain certifications.

You will develop and maintain security policies, assess threats, and guide controls in a dynamic SaaS environment. You will collaborate with product and engineering teams, monitor regulatory changes, and support internal audits to protect customer data across our global

Qualifications

• 4-7 years of Information Security and Compliance experience.
• Experience with SOC 2, ISO 27001 and similar frameworks.

Responsibilities

• Manage the company's risk posture and appetite.
• Ensure proactive approach to global compliance and regulations.
• Engage with auditors to obtain and maintain certifications.
• Support audits through timely response, gap analysis, and remediation.
• Develop, publish, and maintain security policies and controls.
• Evaluate new cybersecurity threats and update controls.
• Coordinate incident response and regulatory reporting.
• Stay updated on industry trends and regulatory developments.

Skills

Information security

Compliance management

Risk assessment

Audits

GRC

Communication

3rd party management

Regulatory awareness

Education

CISSP/CISM/CISA certifications

Bachelor's in CS/IT or related field

Tools

GRC tools

Job description

Full time

Job Description

MoEngage is an insights-led customer engagement platform, trusted by 1,200+ global consumer brands.As a Great Place to Work Company we are a young, fast-paced and intelligent customer engagement platform that fosters a culture of innovation, ownership, freedom, and fun while building future-ready technology products. Sitting at a conflux of diverse technologies likeArtificial Intelligence, Big Data, Web & Mobile platforms, MoEngage technology analyzes billions of data points generated by customers and their devices in order to predict their behavior and engage them at every touchpoint throughout their lifecycle with personalized communication.

In just eight years since our inception, we have worked with leading Fortune 500 brands such as Deutsche Telekom, Samsung, Ally Financial, Vodafone, and McAfee along with internet-first brands such as Flipkart, Ola, OYO, Bigbasket, and Sharechat, with a global presence that encompasses 35 countries. We currently haveoffices in San Francisco, Boston, London, Dubai, Ho Chi Minh city, Bangkok, Kuala Lumpur, Singapore, Sydney, Vietnam, Berlin, Jakarta, and Bengaluru.

The care we give to our customers is quite high! Our achievement of top service and support ratings in Gartner's Magic Quadrant, Gartner Peer Insights, and G2 Summer Reports is a testament to that. Another commendable quality is our people-centric culture, as we have recently been included in Battery Ventures' top 25 private cloud computing companies . As recognized by the DivHERsity Awards, we are one of the top 20 diversity companies in the world, while the Economics Times names us as one of the Top Organizations for Women.

Will you be able to thrive in a fast-paced environment where innovation, speed, and customer-centric thinking are the norm? Is it your passion to uncover opportunities others are unaware of and to champion them? Do you crave ownership and a chance to be a part of something that matters? If so, this may be a worthwhile opportunity for you!

As an InfoSec Engineer, you will

• Manage the company's Risk Posture and Appetite
• Accountable to ensure a proactive approach to achieve global compliance and regulations
• Engage with auditors to acquire and retain certifications/ attestations
• Support audits through timely response, escalation management, gap analysis, mitigation etc.
• Conduct internal reviews and assessments of solutions, processes, procedures and practices.
• Manage risk profile of the IT systems and provide strategic risk guidance including evaluation and recommendation of technical controls.
• Develops, maintains and publishes up-to-date security policies, standards and guidelines.
• Evaluates new cybersecurity threats and IT trends and develop effective security controls.
• Evaluates potential security breaches, coordinates the response, and recommend corrective actions.
• Maintains current knowledge of industry and regulatory trends and developments for the enterprise technology.
• Envolve in Supply Chain Security Risk assessments

Does this sound like you?

• You enjoy solving challenging compliance adherence practices in a SaaS environment
• You have an experience that shows breadth and depth of security knowledge. You are strong in multiple Information security controls.
• You know how to work as a partner with product teams and give them the advantage of your security experience and understanding of best practices.
• You work ceaselessly to improve your knowledge of the security threat landscape, technologies and compliances.
• You are an effective communicator who engages well with technical and non-technical audiences alike

Skills that you would need:

• Develop and maintain robust information security controls to protect the MoEngage business from security breaches/ incidents.
• Knowledge of ISO 27001, SOC 2, CSA STAR and other compliance frameworks
• Hands-on Governance, Risk Management and Compliance (GRC) experience.
• Awareness of information security concepts and risk management skills optimized with the business environment
• Experience working with 3rd party auditors for compliance reviews
• Ability to drive Internal Audits
• Solid communication and customer relationship skills

Requirements

• 4-7 years of experience in Information Security and Compliance Management
• Security Certifications such as CISSP, CISM, CISA etc. are good to have
• Typically a background in technical security roles or operations, with a clear and abiding interest in security
• Understanding and preferably implementation exposure on compliance frameworks and standards like SOC 2, ISO 27001 etc
• Ability to work in a fast-paced and flexible work environment with minimal supervision.
• Solid understanding of IT risks and controls, experience in assessing and mitigating risk
• Must have strong interpersonal skills and should be able to communicate complex ideas seamlessly in written and verbal communication.

Job Snapshot

Updated Date

06-03-2023

Job ID

Job234

Department