Experience Level: Mid Level
We are seeking a Senior Security Analyst or Security Analyst with 3-5 years of experience in Bengaluru to spearhead our information security strategy. This pivotal role involves ensuring compliance with global standards, safeguarding critical assets, and driving policy governance. You will leverage deep expertise in compliance frameworks, risk management, vendor security, and audit readiness, coupled with strong leadership in policy governance and awareness programs.
Maintain and oversee compliance with:
Ensure adherence to external regulations such as UK FCA and DORA. Support evidence collection and audit readiness for ISO, PCI DSS, SOC 2, SWIFT CSP, and other certifications.
Conduct periodic internal audits across compliance frameworks. Perform continuous risk assessments and maintain risk registers based on IT assets. Track, monitor, and support remediation for audit findings and regulatory gaps. Implement and maintain enterprise-level risk assessment methodology with quarterly reviews.
Conduct vendor and partner risk assessments during onboarding and annual reviews. Evaluate security controls, compliance posture, and contractual requirements. Respond to partner DDQs and ensure ongoing compliance through re-assessments.
Develop, maintain, and govern security policies, procedures, and standards. Align documentation with best practices, regulatory obligations, and business needs. Conduct periodic policy and SOP reviews to ensure relevance and compliance.
Design and deliver organization-wide security awareness programs (digital and instructor-led). Conduct refresher sessions and track compliance metrics. Facilitate awareness training materials for employees and partners.
Oversee VA/PT activities and coordinate with application teams. Ensure timely remediation and track compliance to maintain secure system baselines.
Support Business Continuity Planning (BCP) and testing. Conduct monthly, quarterly, half-yearly, and annual reviews of resilience measures.
Coordinate with cross-functional teams for compliance reporting and metrics. Maintain evidence repositories and documentation for external audits. Ensure continuous compliance posture through proactive monitoring.
TerraPay is a leading global digital payment infrastructure company committed to driving financial inclusion and enabling seamless cross-border transactions. We empower businesses and individuals worl...