Security Engineer - GRC
ConfidentialBengaluru / Bangalore, India8 days ago
Job descriptionPolicy Development and Enforcement : Develop, implement, and maintain policies, procedures, standards, and associated plans based on industry best practices such as ISO 27001, NIST, ITGC, PCI-DSS, etc. Ensure rigorous enforcement of these policies. Risk Assessment and Management : Conduct technology-based gap risk assessments, third-party risk assessments, and M&A security governance. Manage exceptions against Groww standards to maintain risk at an acceptable level. Compliance Checks : Perform compliance checks for user access management on network, servers, and applications. Additionally, ensure compliance with security and hardening standards for network, servers, applications, and workstations. Compliance Reporting : Prepare compliance reports and remediation plans based on periodic reviews of application, workstation, server, and network device configurations. Data Loss Prevention (DLP) and CASB : Monitor and maintain compliance of Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) for all applications, infrastructure, and systems supporting Groww operations to prevent data leakage. SDLC Risk Assessment : Conduct risk assessments on applications during the Software Development Life Cycle (SDLC) and perform compliance checks related to access control and data sanitization. Risk Register Management : Identify, document, and maintain an information security risk register. Regularly report to the security lead and other stakeholders. Third-Party Risk Management : Provide monitoring, independent oversight, and facilitate the execution and continuous improvement of third-party risk management and M&A programs and processes. Security Control Automation : Influence security control automation efforts to enhance security and compliance at scale. Audit Representation : Represent Groww's security posture in both internal and external audits. Security Awareness : Drive security awareness initiatives and conduct regular training on Groww's security policies and standard requirements through training sessions, communication, and workshops. A bachelor's degree in information technology or a related field provides a strong foundation. A minimum of 1-3 years of professional experience in information security practices, with at least 1 year specializing in Governance, Risk, and Compliance (GRC) domains. Previous experience in managing SEBI, RBI, and IRDAI compliance and audits is highly valuable. Proficiency in security policy management and a deep understanding of security standards and frameworks, including CSA CCM, ISO 27001 : 2013, NIST CSF, PCI-DSS, SOX, and SOC2. Solid grasp of operational and organizational structures, including experience in global, matrix organizations, and third-party risk management. Strong knowledge of core security principles such as least privilege access, defense in depth, preventative vs. detective controls, network security, cloud security, application security, endpoint security, data protection, and incident response. Familiarity with agile methodologies and experience in DevOps or DevSecOps practices, along with an understanding of how they impact risk management and compliance. Possession of information security certifications, such as CISSP, CISM, CRISC, CEH, or ISO 27001, demonstrates expertise and will be an added benefit. Experience in reviewing High-Level Design (HLD) and Low-Level Design (LLD) and driving cross-functional programs is a plus.
About Groww
We are a passionate group of people focused on making financial services accessible to every Indian through a multi-product platform. Each day, we help millions of customers take charge of their financial journey.
Customer obsession is in our DNA. Every product, every design, every algorithm down to the tiniest detail is executed keeping the customers' needs and convenience in mind.
Our people are our greatest strength. Everyone at Groww is driven by ownership, customer-centricity, integrity and the passion to constantly challenge the status quo.
Are you as passionate about defying conventions and creating something extraordinary as we are Let's chat.
Our Vision
Every individual deserves the knowledge, tools, and confidence to make informed financial decisions. At Groww, we are making sure every Indian feels empowered to do so through a cutting-edge multi-product platform offering a variety of financial services.
Our long-term vision is to become the trusted financial partner for millions of Indians.
Our Values
Our culture enables us to be what we are — India's fastest-growing financial services company. It fosters an environment where collaboration, transparency, and open communication take center-stage and hierarchies fade away. There is space for every individual to be themselves and feel motivated to bring their best to the table, as well as craft a promising career for themselves.
The values that form our foundation are :
- Radical customer centricity
- Ownership-driven culture
- Keeping everything simple
- Long-term thinking
- Complete transparency
EXPERTISE AND QUALIFICATIONS
What you'll do :
What we're looking for :
Skills Required
Cloud Security, Endpoint Security, Network Security, Data Protection, SOC2, itgc, Incident Response, Devops, DevSecOps, Iso 27001, Application Security, nist, Agile Methodologies, Sox
Create a job alert for this search
Security Engineer • Bengaluru / Bangalore, India
Related jobs![Security Engineer [T500-20670]](https://cdn-logos.talent.com/v1/logo/image?feedcode=clickcast-appcast-li-in-cpc&company_name=Delta%20Air%20Lines)
![Engineer I - Security [T500-21027]](https://cdn-logos.talent.com/v1/logo/image?feedcode=clickcast-appcast-li-in-cpc&company_name=lululemon)
We are seeking a highly skilled and motivated AI Engineer with expertise in large language models (LLMs), AI workflows, and machine learning.
This role combines deep technical knowledge in ML / AI wit...Show moreLast updated: 24 days ago
- Promoted
Security Engineer [T500-20670]
Delta Air LinesBengaluru, Karnataka, India Delta Air Lines (NYSE : DAL) is the U.Powered by our employees around the world, Delta has for a decade led the airline industry in operational excellence while maintaining our reputation for award-...Show moreLast updated: 2 days ago
- Promoted
Engineer I - Security [T500-21027]
lululemonBengaluru, Karnataka, India Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well.We owe our success...Show moreLast updated: 15 days ago
- Promoted
Senior Security Engineer
Deep Armorbangalore, karnataka, in We’re looking for a Senior Security Engineer to lead and support product security efforts for cloud-hosted web applications.
You will be responsible for deep-tech product security design reviews, co...Show moreLast updated: 1 day ago
- Promoted
Cyber Security Engineer
Dautomhosur, tamil nadu, in Security Monitoring and Incident Response.Monitor networks and systems for potential security breaches.Investigate and respond to security incidents and anomalies.
Conduct forensic analysis to deter...Show moreLast updated: 3 days ago
- Promoted
Cyber Security Engineer with Splunk
IntraEdgehosur, tamil nadu, in This role will lead the development and implementation of intelligent security solutions using SIEM, SOAR, and machine learning to enhance detection, response, and operational efficiency across the...Show moreLast updated: 30+ days ago
- Promoted
Senior Product Cyber Security Engineer - GRC
People KonnectBangalore Role : Senior Product Cybersecurity Supplier - GRC Analyst (Embedded / OT only) Client : Global Electrical Product Comp...Show moreLast updated: 30+ days ago
- Promoted
Security Engineer
InfogainBengaluru, Karnataka, India Title : Security Engineer (6+ Years).Use CrowdStrike reports to evaluate all security vulnerabilities on both Windows and Linux systems.
Analyze the requirements to remediate the security vulnerabili...Show moreLast updated: 17 days ago
- Promoted
SAP GRC Security Lead Consultant - Australia (Onsite)
Avensys Consultinghosur, tamil nadu, in Avensys is a reputed global IT professional services company headquartered in Singapore.Our service spectrum includes enterprise solution consulting, business intelligence, business process automat...Show moreLast updated: 2 days ago
- Promoted
Contractor Security Engineer Level 3 – GRC Tech Solutions
MindlanceBangalore, IN Remote Role | Contractor Security Engineer Level 3 – GRC Tech Solutions.This position focuses on enabling process clarity, automation, and efficiency while creating insights that empower our busine...Show moreLast updated: 17 days ago
- Promoted
Implementation Engineer - Security - F5
Tech Data APACBengaluru, Karnataka, India Job Summary : We are looking for a skilled Implementation Engineer to design, deploy, and support F5 solutions across enterprise environments.
The ideal candidate will have strong hands-on experienc...Show moreLast updated: 3 days ago
- Promoted
AI Engineer - Cyber Security Start-up - Remote - LLM, MCP, Statistical Rigor, System Design and API in Production Scale Environment - CTC INR - 60 L
CareerXperts Consultinghosur, tamil nadu, inRemote
- Promoted
Security GRC Engineer
ConfidentialBengaluru / Bangalore, India Docusign brings agreements to life.Docusign solutions to accelerate the process of doing business and simplify people's lives.
With intelligent agreement management, Docusign unleashes business-crit...Show moreLast updated: 2 days ago
- Promoted
Senior Security Engineer - GRC
ConfidentialBengaluru / Bangalore, India We are a passionate group of people focused on making financial services accessible to every Indian through a multi-product platform.
Each day, we help millions of customers take charge of their fin...Show moreLast updated: 8 days ago
- Promoted
Senior Security Engineer - GRC
Growwbangalore, karnataka, in We are a passionate group of people focused on making financial services accessible to every Indian through a multi-product platform.
Each day, we help millions of customers take charge of their fin...Show moreLast updated: 12 days ago
- Promoted
Engineer I - Security T500-21027
lululemonBengaluru, Republic Of India, IN Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well.We owe our success...Show moreLast updated: 15 days ago
- Promoted
Security Engineer - GRC
Growwbangalore, karnataka, in We are a passionate group of people focused on making financial services accessible to every Indian through a multi-product platform.
Each day, we help millions of customers take charge of their fin...Show moreLast updated: 4 days ago
- Promoted
Lead Security Engineer
interface.aiBengaluru, IN Our cutting-edge Generative AI-powered platform serves over 100 banks and credit unions, delivering hyper-personalized customer interactions across voice, chat, and employee-assisting solutions.To ...Show moreLast updated: 30+ days ago
- Promoted
Senior Security Engineer - Grc
GrowwBengaluru, Republic Of India, IN We are a passionate group of people focused on making financial services accessible to every Indian through a multi-product platform.
Each day, we help millions of customers take charge of their fin...Show moreLast updated: 30+ days ago