Digital Security Officer

Digital Security Officer (DSO) Location: Bangalore Department: Information Security / Technology Employment Type: Full-time Role Overview The Digital Security Officer (DSO) is responsible for safeguarding the organization s digital platforms, applications, infrastructure, and data. The role ensures robust security controls, regulatory compliance, and proactive risk management across cloud, SaaS, and enterprise environments. Key Responsibilities Security Governance & Strategy Define and maintain the organization s digital security strategy aligned with business goals Develop and enforce security policies, standards, and procedures Ensure compliance with ISO 27001, SOC 2, GDPR, DPDP Act, and NIST Risk & Compliance Management Identify and mitigate cyber and digital security risks Maintain the information security risk register Support internal and external audits Identity & Access Management (IAM) Enforce least-privilege and role-based access control Oversee user provisioning and access reviews Ensure MFA and PAM enforcement Infrastructure, Cloud & Application Security Enforce secure baseline configurations (CIS Benchmarks) Oversee hardening of servers, endpoints, networks, and cloud workloads Ensure secure DevSecOps practices Data Protection & Privacy Ensure encryption, data classification, and secure handling Support compliance with GDPR, DPDP, and CCPA Vulnerability & Patch Management Oversee vulnerability scanning and remediation Ensure timely deployment of critical security patches Security Monitoring & Incident Response Oversee SIEM and SOC operations Lead incident response and investigations Third-Party & Vendor Security Conduct vendor risk assessments Govern API and integration security Awareness & Training Drive organization-wide security awareness programs Business Continuity & Disaster Recovery Define and test BCP/DR plans Required Skills & Qualifications Bachelor s degree in Computer Science or related field 3-5 years of experience in information security Strong knowledge of cloud security, SaaS, APIs, and DevSecOps Preferred Certifications (Not mandatory) ISO 27001 Lead Implementer / Auditor CISSP / CISM / CCSP