Information Security Engineer

About Credgenics :

Credgenics is India's first of its kind NPA resolution platform backed by credible investors including Accel Partners and Titan Capital. We work with financial institutions, Banks, NBFCs & Digital lending firms to improve the efficiency of their collection using technology, automation intelligence and optimal legal routes to facilitate the resolution of stressed assets.

With all major banks and NBFCs as our clients, our SaaS-based collections platform helps them efficiently improve their NPA, geographic reach and customer experience.

We count most of India's lending majors as our clients such as ICICI Bank, Axis Bank, Bank of Baroda, etc and have been able to grow 100% MoM consistently even among the pandemic.

Role Overview :

We are looking for a highly skilled Information Security Engineer II to join our team and play a critical role in safeguarding our information systems and data against potential threats. In this position, you will leverage your expertise to design and implement robust security measures, conduct risk assessments, and ensure compliance with industry standards.

Responsibilities :

• Design, implement, and manage security architecture for our systems, ensuring adherence to best practices and compliance requirements.
• Conduct thorough risk assessments and vulnerability analysis to identify security weaknesses and recommend mitigation strategies for the complete IT infrastructure of the company .
• Coordinate with Cert-In empanneled vendors for annual VAPT and PCI DSS certification compliance, manage engagements and ensure standards adherence.
• Coordinate and handle customer queries related to information security during customer onboarding and handle the periodic banks audit for information security.
• Develop and enforce security policies, procedures, and standards to protect sensitive information.
• Monitor security alerts and incidents, responding promptly to security breaches and providing detailed reports on findings and resolutions.
• Collaborate with cross-functional teams to integrate security into all phases of the software development lifecycle (SDLC).
• Collaborate with third-party vendors and service providers to perform vendor risk assessment and ensure the security of outsourced systems and services.
• Perform user access management review, firewall config, rules review and coordinate with the team for the mitigation of all observations.
• Perform email system's security assessment to evaluate anti-phishing, anti-spam, and DLP controls. Manage and maintain security systems such as SIEM, IDS / IPS, and DLP to detect and respond to security incidents.
• Document security findings, recommendations, and remediation plans, and communicate them to relevant stakeholders in a clear and concise manner.
• Assist in the development and maintenance of security awareness and training programs for employees, promoting a culture of security throughout the organization.

Required :

Soft Skills and Cultural Fit

Skills Required

DevSecOps, Penetration Testing