Senior Infosec Engineer

At Zerodha Fund House, we are enabling the next generation of Indian investors. We think the mutual fund needs to be re-imagined as a product: simple, transparent, and relevant enough to bring the next 10 crore Indians into the capital markets. We are building the founding team and are looking for smart, passionate people to join us.

We are looking for a Senior Security Engineer to own security at ZFH. This is a foundational role. You will be the person who defines what security means here, sets the standards the rest of engineering builds against, and grows the function (and eventually the team) as we scale.

Key Responsibilities

● Draft, coordinate & monitor IT processes & policies to ensure compliance as per IT Act, regulatory bodies (e.g. SEBI - preferred, RBI, GDPR, UIDAI etc.), info security (ISM) guidelines and other applicable laws with respect to Technology, in coordination with internal & external stakeholders

● Prepare & update business-wise IT inventory and critical softwares required by the Compliance/Legal teams for regulatory filings and 3rd party audits

● Conduct vendor risk assessment & ensure identified gaps are proactively filled

● Introduce new processes & policies by studying new regulations, market studies and surveys relevant to our business

● Plan, formulate, coordinate, implement & monitor the cyber crisis management plan (CCMP)

● Incident Management, resolution and reporting

● Interface with external auditors and set up processes to ensure all Infosec audits go smoothly

● Formulate, implement, review & monitor BCP

Requirements

● 7-10 years of experience, including being SPOC for Infosec audits

● In-depth knowledge of technology, security, risk and compliance best practices

● Understanding of SEBI CSCRF, SAR, Cloud Adoption frameworks

● Strong capability in interfacing with technology, business teams, board members and external vendors

● Detailed understanding of security monitoring, threat intelligence & vulnerability management

● A self-driven attitude with a strong sense of ownership

● Experience with SEBI (preferred) and/or RBI audits is a big plus

● Assisting the team to conduct Technology Committee

● Assisting the Risk Officer to conduct independent assessments of the business functions

● Provide timely data for Risk Management Committee