Information Security Specialist

• Support the implementation and maintenance of security strategy and framework in collaboration with engineering and IT
• Assist in identifying security needs and contribute to the security roadmap with clear prioritization, including technical reviews of platforms and architecture
• Communicate security requirements with architects and internal IT teams
• Participate in security audits, including coordination with 3rd party vendors
• Assist in responding to vendor Security assessment requests from prospects/customers
• Support the process of third-party attestation & compliance (SOC, HIPAA, PCI, etc.)
• Monitor and respond to security threat intelligence, vulnerability feeds, incidents and alerts in a timely manner
• Assist in business continuity and disaster recovery planning, exercises, and any recovery activities
• Conduct vulnerability assessments, support penetration testing engagements and support remediation efforts
• Assist in maintaining security management system, documentation, policies, and procedures
• Support data privacy compliance activities at the locations of operations including US state compliance (e.g. CCPA) and internationally (e.g. GDPR)
• Assist in risk management work by supporting the maintenance of risk register and coordinate risk mitigation activities with the organization responsible personnel
• Perform routine security monitoring of cloud and corporate IT environments
• Provide guidance and awareness training to internal staff on security best practices and manage training platforms

• B.E or BS degree from an accredited college or university, or 5 years of work experience in information security
• 5+ years of work experience in an information security role, ideally within a SaaS software company
• Familiarity with start-up or high-growth company environments
• Ability to participate in management level conversations on balancing business opportunities against security risks
• Collaborative mindset with ability to work across cross-functional teams
• Knowledge of common security requirements and certificates (e.g. ISC2 CSSLP, ISC2 CISSP, ISACA CISA,ISACA CISM, ISACA CRISC, ISC2 CISSP, ISC2 CSSLP, CompTIA Security+, CEH)
• Foundational knowledge of information security strategies with cloud computing platforms
• Familiarity with agile software development methods
• Knowledge of cloud-based IT infrastructure, collaboration, & security systems
• Knowledge of essential cloud providers and their technologies (such as AWS, Google, Oracle and Microsoft)
• Familiarity with networking and firewall systems
• Knowledge of compliance frameworks such as ISO 27001, SOC 2, PCI, HIPAA
• Exposure to working with third parties for attestation and compliance with data privacy information security regulations
• Familiarity with data privacy standards, regulations and frameworks
• Basic knowledge of technical security tools and processes
• Data-driven, intellectually curious, and numerically inclined
• Good organizational skills and attention to detail
• Curiosity for continuous learning
• Fluent English language skills

• Be part of a fast-growing organization actively integrating AI into its products, processes, and future vision.
• Exposure to working with a Microsoft gold partner organization with the latest technologies.
• People first organization culture
• Company Paid Group Mediclaim Insurance for employees, spouse and up to 2 Kids of INR 400,000 per annum
• Company Paid Group Personal accidental insurance for employees of INR 1,000,000 per annum.
• Company Paid & Manager approved Career Advancement Opportunities
• Best-in-the-Industry referral policy.
• 29 Paid leaves throughout the year
• Company-paid Maternity leaves for female employees

PairSoft