Sr. Security Compliance Engineer

Pratiti Technologies Pvt Ltd; Pune District; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Pratiti Technologies Pvt Ltd is seeking a dedicated professional for the security and compliance team, responsible for implementing secure controls and conducting audits. The ideal candidate will have a Bachelor's in Computer Science and over 4 years of experience in the field.

This role entails working with AWS and relevant compliance frameworks to ensure systems adhere to required regulations while enhancing operational efficiency.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Security or a related field.
• 4+ years of experience within a security and compliance function.
• Experience with vulnerability management tooling and processes.

Responsibilities

• Design and implement secure, compliant controls within cloud infrastructure.
• Conduct internal audits and manage third-party risk.
• Create and enforce information security policies and procedures.

Skills

Cloud security expertise

Vulnerability management tooling

Strong analytical skills

Experience with Docker

Technical proficiency in Python

Education

Bachelor’s degree in Computer Science or related field

Tools

Terraform

AWS

Job description

Pratiti Technologies Pvt. Ltd. | Full time

• Engineering & Implementation: Designingand implementing secure, compliant controls within cloud and ITinfrastructure, often using "policy-as-code".
• Audit & Risk Management: Conductinginternal audits, managing third-party risk, and providing evidence forexternal assessments in alignment with national and internationalregulations.
• Policy & Documentation: Creating,managing, and enforcing information security policies, procedures, andtechnical standards.
• Vulnerability Management: Identifyingsecurity gaps and driving remediation in partnership with IT, DevOps, andengineering teams.
• Monitoring & Tools: Maintainingcontinuous monitoring of security controls and utilizing automation toreduce manual audit work.
• Implement security measures and compliance controls within ourbackend systems, focusing on cloud environments like AWS and enterprisesecurity.
• Collaborate with compliance project managers and corporate ITto adopt new compliance standards, integrate them with existing securitysolutions and collect evidence for external audits.
• Enhance data protection, conduct risk assessments, and ensuresystems comply with standards like GDPR, SOC2, or ISO.
• Ensure controls are configured correctly and integrated intothe security strategy
• Identify and mitigate vulnerabilities, ensuring both securityand compliance across systems.
• Stay updated on security technologies and complianceregulations, applying this knowledge to improve our infrastructure.
• Works with the engineering team to build secure and compliantsoftware development practices.
• Manage application patching and update AWS configurations usingTerraform to maintain system integrity and performance.
• Work with the team to conduct regular audits to ensurecompliance with internal policies and procedures, relevant securitystandards, best practices, regulations and client requirements to identifygaps and provide remediation solutions.
• Staying up to date on the latest AI developments is an addedvalue, but not required

Qualifications

• Bachelor’s degree in Computer Science, Information Systems,Security or a related field.
• 4+ years of experience within a security and compliancefunction
• 3+ years of experience in GRC (Governance, Risk, andCompliance), security operations, or audits.
• Experience with vulnerability management tooling, remediation,and processes
• Experience with Docker, Terraform, AWS
• Understanding of concepts related to SystemsEngineering/DevOps, IaC, IAM, network security, systems security,cryptography, privacy,
• Understanding of compliance frameworks (e.g., GDPR, SOC2, ISO)and security best practices.
• Strong expertise in cloud security and compliance, particularlywith AWS.
• An understanding of best practices and how to implement them ata business-wide level.
• Have a wide understanding of cybersecurity and data protectionwith frameworks such as SOC 2, ISO 27001, NIST, DPDPA, or GDPR.
• Technical proficiency in scripting (Python, Bash, PowerShell)and security tools.
• Strong understanding of cloud security (AWS, Azure, etc.).
• Critical thinking skills and the ability to solve problems asthey arise.
• Direct experience with International and National Laws andRequirements.
• Knowledge of disaster recovery, computer forensic tools,technologies, and methods around data protection.
• Experience planning, researching, and developing policies,standards, and procedures to align with company’s strategy and bestpractices.
• Experience in NIST 800 series standards and NIST PrivacyFramework, preferred.
• Knowledge of Large Language Models (LLMs) and secure, compliantintegration.
• Ability to communicate identified issues to peers andmanagement.
• Analyze systems and seek improvements on a continuous basis.
• Deep understanding of how artificial intelligence works is anadded value, but not required
• Attention to detail and concentration

This role is critical for reducingorganizational risk while enabling product teams to move quickly withoutcompromising security posture.