Cyber Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Take charge of daily security compliance and Information Security Management System (ISMS) activities in accordance with ISO 27001, PCI DSS, SOC 2 readiness, and relevant regulatory frameworks.

• Oversee the complete process of internal and external audits, certifications, and assessments, which includes engaging with auditors, validating evidence, and closing corrective actions.

• Manage customer security questionnaires, due diligence, and security assessments while collaborating with business stakeholders and customer security teams.

• Update and maintain security policies, conduct risk assessments, and document controls, ensuring assessment of control effectiveness and resolution of compliance findings.

• Coordinate third-party security evaluations, support data protection and security awareness initiatives, and uphold continuous compliance monitoring.

• Contribute to security operations, including SIEM/EDR monitoring, threat detection, incident investigations, cloud security, and vulnerability management.

• Assist with application security and DevSecOps projects by implementing secure Software Development Life Cycle (SDLC) practices, integrating security into CI/CD, and validating vulnerabilities through SAST/DAST/SCA.

• Utilize automation and AI technologies to enhance security assessments, compliance tasks, and operational workflows.

⛳️ Requirements

• A Bachelor’s degree in Information Security, Computer Science, or a related discipline.

• A minimum of 3 years of practical experience in cybersecurity or information security, specifically in security compliance, assurance, or Governance, Risk, and Compliance (GRC).

• Proven experience in maintaining an ISO 27001 ISMS, coordinating audits, validating controls, and managing compliance documentation.

• Familiarity with customer security questionnaires, due diligence evaluations, and collaboration with auditors and cross-functional teams.

• Working knowledge of PCI DSS, security risk management, and frameworks like NIST CSF.

• Strong technical background in cloud and SaaS architectures, networking, identity and access management, and web security, including OWASP Top 10.

• Excellent analytical, problem-solving, and communication skills, with proficiency in English.

• Experience with AI-assisted tools for research, analysis, and automation, along with the discernment to validate results and manage sensitive information responsibly.

🏝️ Benefits

• The chance to take real ownership of products that influence millions of diners and thousands of restaurants worldwide.

• Opportunities to tackle complex challenges in payments, hospitality, and customer experience.

• A dynamic work environment where innovative ideas are rapidly transformed into reality.

• Close collaboration with seasoned operators, builders, and industry experts.

• An opportunity to make a significant impact in one of the fastest-growing restaurant technology companies on a global scale.