Security & Compliance Engineer

Weekday (YC W21)

. Provide first response and operational support for information security incidents .

Posted 9/19/2026full-timeRemote • IndiaMid-LevelSenior💰 ₹1,000,000 - ₹2,000,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response, security governance, and compliance with ISO 27001 and PDPL standards. Proficient in managing security incidents, developing operational procedures, and coordinating with cross-functional teams to enhance security operations.

Highest-signal resume keywords

Incident Response ManagementISO 27001 ComplianceBeyondTrust PAM AdministrationSecurity GovernanceRisk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ContainmentSecurity Incident InvestigationRunbook DevelopmentSecurity Metrics PreparationAccess GovernanceSecurity Risk Register MaintenanceRoot-Cause AnalysisPost-Incident ReviewSecurity Control AssessmentInformation Classification

Soft Skills

Strong Coordination SkillsExcellent Communication SkillsAnalytical AbilitiesProblem-Solving SkillsAbility to Work Independently

Tools & Technologies

BeyondTrust PAMSecurity DashboardsIncident Tracking SystemsCompliance Documentation ToolsSecurity Audit Tools

Industry Keywords

Information SecurityCybersecuritySecurity OperationsCompliance FrameworksGovernance Processes

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Provide first response and operational support for information security incidents
Execute incident containment, response, escalation, and recovery activities
Develop, maintain, and improve security incident response runbooks and procedures
Coordinate with MDR/SOC teams to investigate, contain, and resolve security incidents
Support incident investigation, documentation, root-cause analysis, and post-incident reviews
Monitor and track security incidents, actions, escalations, and remediation activities
Support ISO 27001 information security management and compliance activities
Contribute to PDPL compliance initiatives, security controls, assessments, and documentation
Support information classification, handling requirements, records management, and information governance processes
Coordinate and provide evidence for internal and external security audits
Maintain and update security risk registers and track mitigation and remediation activities
Prepare and maintain monthly security metrics, dashboards, and management reports
Support periodic security and governance reviews, including Y1.2 reviews and related assessment activities
Administer and support BeyondTrust Privileged Access Management (PAM)
Review privileged access, access controls, approvals, and governance requirements
Coordinate with governance, compliance, IT, security, and business stakeholders on security initiatives
Support security control assessments, compliance reviews, and remediation tracking
Maintain accurate security policies, procedures, records, evidence, and governance documentation
Identify opportunities to strengthen security operations, incident readiness, information governance, and compliance processes

Requirements

What you’ll need

5+ years of professional experience in IT security, information security, cybersecurity, security governance, or compliance
3+ years of hands-on experience in incident response and security operations
2+ years of experience with ISO 27001 and PDPL compliance or related information-security regulatory frameworks
2+ years of experience in information governance, including information classification and records management
Strong understanding of security incident response processes, containment, escalation, investigation, and recovery
Experience developing and maintaining incident response runbooks and operational procedures
Experience coordinating with SOC, MDR, or managed security service providers
Hands-on experience with BeyondTrust PAM administration
Strong understanding of privileged access management, access governance, and security controls
Experience maintaining security risk registers and supporting risk assessments and remediation
Experience preparing security metrics, management reports, audit evidence, and compliance documentation
Strong understanding of ISO 27001, information security governance, risk management, and audit processes
Practical knowledge of PDPL requirements and information governance principles
Strong coordination skills with the ability to work across security, governance, compliance, IT, and business teams
Excellent written and verbal communication skills
Strong analytical, documentation, and problem-solving abilities
Ability to work independently in a remote environment and manage multiple security and compliance priorities