Information Security & Audit Engineer

Information Security & Audit Engineer and play a key role in safeguarding modern trust and financial infrastructure. You will drive the organization's security posture by leading vulnerability assessments, penetration testing, and supporting regulatory compliance across cloud and enterprise environments. This is an opportunity to collaborate with cross-functional teams, leverage the latest security tools, and contribute to the protection of critical assets in a highly regulated, innovative environment. Key Responsibilities Conduct comprehensive vulnerability assessments and penetration testing (VAPT) for web applications APIs, cloud infrastructure, operating systems, and network devices Perform authenticated and unauthenticated vulnerability scans using industry-standard security tools (Nessus Tenable, etc.) Lead cloud security assessments and reviews across AWS and GCP environments, including IAM, encryption, and privileged access controls Coordinate remediation activities and validate fixes with engineering DevOps, and infrastructure teams Review and ensure secure configurations based on CIS Benchmarks and industry best practices Support and maintain the Information Security Management System (ISMS), including risk assessments and risk register maintenance Plan, coordinate, and support internal and external audits (SOC 2 PCI DSS GLBA CIS Controls OWASP Top 10), including evidence collection and control testing Develop, review, and maintain security policies, standards, guidelines, and documentation to align with regulatory and business requirements Participate in security incident investigations, root cause analysis, and corrective action implementation Promote security awareness through training, phishing simulations, and cross-functional collaboration Requirements Must have Bachelor's degree in Computer Science Information Technology Cyber Security, or a related discipline Minimum of 2 years of hands-on experience in Information Security Cyber Security IT Audit, or Governance Risk & Compliance (GRC) Strong understanding of cloud security in AWS and GCP environments Practical experience with vulnerability management and penetration testing tools such as Nessus and Tenable Excellent analytical thinking, problem-solving, and communication skills Proven ability to document, report, and present security findings to technical and non-technical stakeholders Demonstrated integrity, attention to detail, and ability to manage multiple priorities Good to have Experience working in fintech, banking SaaS, or other regulated industries is preferred Professional certifications such as CEH CompTIA Security+ CISA CISSP ISO/IEC 27001 Lead Auditor PCI Professional AWS Certified Security Specialty, or Google Professional Cloud Security Engineer are a plus Familiarity with Microsoft Azure security services is a plus Bonus Experience with container and Kubernetes security assessments is an added advantage Knowledge of scripting or automation for security tasks is a bonus Benefits Competitive salary and performance-based incentives Exposure to modern cloud technologies (AWS, GCP) Opportunities for continuous learning and professional certifications Collaborative and integrity-driven work culture Hands-on experience with leading security and compliance frameworks (SOC 2 PCI DSS GLBA) Support for professional growth and career advancement