Padmi

Cybersecurity and Data privacy Engineer - RegTech (India)

IndiaPosted 1 month ago
CybersecuritySeniorFull Time; Regular
Apply at Infosys

Opens the source posting on shine.com

Source description

About the role

View original

Job Description: - As a Cybersecurity and Data Privacy Engineer you will help design and validate security and privacy controls for a cloud native enterprise platform used in regulated business workflows - You will work with architects DevOps engineering product and QA teams to build security access control privacy and client trust requirements into the platform from the start Key Responsibilities: - Define and review security requirements across authentication authorization RBAC tenant isolation encryption secrets management API security and secure deployment - Design and validate data privacy controls for sensitive data PII handling retention masking deletion access logging and secure data movement - Support threat modeling secure architecture review security test planning vulnerability management and remediation tracking - Work with DevOps teams to implement security controls around cloud configuration Key Vault managed identities private networking security monitoring and policy guardrails - Review application security patterns including input validation access control session handling secure logging audit events and data leakage prevention - Support readiness for external certifications and client security reviews such as SOC 2 ISO 27001 ISO 27701 ISO 42001 SOC 1 and CSA STAR where applicable - Contribute to security documentation control mappings privacy impact inputs security questionnaires and audit evidence - Partner with AI engineers to design AI usage controls prompt data privacy rules AI output logging and responsible AI guardrails Technical Requirements: - Minimum 7 years of experience in cybersecurity application security cloud security data privacy security engineering or risk control roles - Strong understanding of IAM RBAC encryption secrets management API security secure SDLC vulnerability management and cloud security controls - Experience with Azure or other cloud security services including identity Key Vault logging monitoring private networking and security posture management - Understanding of privacy principles including PII handling minimization retention masking access control and data transfer controls - Experience conducting or supporting security reviews threat modeling penetration test remediation vulnerability triage and control validation - Ability to work with engineering teams to convert security requirements into practical implementation guidance - Robust documentation skills for security controls risks remediation plans and audit client review evidence Preferred Skills: Foundational->Cybersecurity Competency Development->Cyber Workforce Skill Development & Position Qualification Standards,Foundational ->Data privacy->Privacy by design,Technology->Application Security->Application Security - ALL,Technology->Infrastructure Security->Cloud Security .

One address, no account. We’ll tell you when matching roles go live.

More at Infosys

Related open roles

View all roles