Engineering-L2-Bengaluru-Vice President-Security Engineering

Location: Bengaluru, Karnataka, India

Roles and Key Responsibilities

• Drive strategic roadmap and execution of the enterprise PAM program.
• Establish and maintain firm-wide privileged access standards, controls, and operating procedures.
• Lead cross-functional initiatives spanning IAM, Infrastructure, Cloud, Application Engineering, and Technology Risk teams.
• Develop and execute multi-year PAM capability uplift programs.
• Define and oversee governance processes for privileged accounts, privileged roles, break-glass access, and privileged activities.
• Ensure alignment with internal security standards, regulatory requirements, and industry frameworks such as NIST.
• Partner with Technology Risk, Compliance, Internal Audit, and regulators to address PAM-related findings and remediation activities.
• Build and maintain Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for executive reporting
• Partner with engineering teams to implement PAM controls within enterprise platforms and applications.
• Drive automation for onboarding, provisioning, certification, monitoring, and de-provisioning privileged access.
• Support cloud and hybrid environments, ensuring secure management of privileged identities across modern infrastructure.
• Influence architectural decisions that improve security while maintaining operational efficiency.
• Develop executive dashboards measuring PAM coverage, privileged account inventory, JIT adoption, MFA coverage, review completion rates, and control effectiveness.
• Provide regular updates to senior management committees and leadership.
• Translate technical risk into business-focused insights and recommendations.

 

Required Qualifications

• Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
• 7+ years of experience in Cybersecurity, IAM, PAM, Information Security, Technology Risk, or Security Engineering.
• Strong understanding of Privileged Access Management (PAM), Identity and Access Management (IAM), Zero Trust security principles, role-based access controls and privileged role governance, secrets management and vault technologies, modern authentication and MFA, security monitoring and detection engineering, and cloud security across AWS, Azure, and GCP environments.
• Strong stakeholder management and executive communication skills.
• Experience driving cross-functional initiatives involving engineering, risk, compliance, and audit teams.

 

Preferred Qualifications

• Familiarity with security and regulatory frameworks such as NIST CSF, NIST 800-53, ISO 27001, FFIEC, SOX, or similar standards, with experience supporting regulatory exams or audit engagements.
• Experience with CyberArk, BeyondTrust, HashiCorp Vault, AWS IAM, Entra ID PIM, or equivalent PAM technologies is an advantage.
• Relevant security certifications, such as CISSP, CISM, CRISC, CCSP, or PAM/IAM-related credentials, are highly desirable.

 

Why Join Us

This is an opportunity to build and scale one of the firm's most strategic cybersecurity programs. You will work with senior leaders, security architects, engineers, and risk professionals to shape the future of privileged 

Privileged Access represents one of the highest-risk areas within the cybersecurity landscape. We are seeking a highly motivated Vice President, Privileged Access Management (PAM) to lead the evolution of our enterprise-wide PAM program and drive the implementation of modern privileged access controls across infrastructure, cloud, applications, and identity platforms. This role sits at the intersection of Identity & Access Management (IAM), Technology Risk, and Engineering. You will partner with senior stakeholders across the organization to establish governance, define security standards, drive control implementation, and monitor privileged access risks across the enterprise. The role will play a critical part in strengthening the firm's security posture through least privilege, Just-In-Time (JIT) access, phishing-resistant authentication, secrets management, session monitoring, and privileged identity governance.