Director, Security Engineering

What you will be doing:

• Develop and execute the strategic vision for security engineering in India, aligning with global security objectives and business goals.
• Provide leadership and guidance to the security team in India, fostering a culture of innovation, collaboration, and excellence.
• Lead the design and architecture of security solutions for our products, systems, and infrastructure in India, ensuring they meet security requirements and industry best practices.
• Define security standards, patterns, and frameworks to guide the development of secure software and systems.
• Establish and maintain a Secure Development Lifecycle (SDL) process for our software development teams in India, integrating security into all phases of the development process.
• Provide training and support to development teams on secure coding practices, security testing tools, and vulnerability management.
• Identify, evaluate, and deploy security tools and technologies to automate security processes, enhance detection and response capabilities, and improve overall security posture.
• Drive the adoption of DevSecOps practices and toolchains to enable continuous integration and delivery of secure software.
• Conduct threat modelling exercises and risk assessments for our products, infrastructure & corporate environments, identifying potential security threats and vulnerabilities.
• Work with cross-functional teams to prioritize and address security risks through proactive mitigation and remediation efforts.
• Develop and maintain incident response plans and procedures for India aligned with the global plan, ensuring the organization is prepared to respond effectively to security incidents and breaches.
• Lead incident response and forensic investigations, collaborating with internal teams and external partners to mitigate the impact of security incidents.
• Ensure compliance with relevant security standards, regulations, and industry certifications applicable to India, such as ISO 27001, PCI DSS, and GDPR.
• Coordinate with compliance and audit teams to support security audits, assessments, and certifications for India operations.
• People management responsibilities for the IT team based out of IDC
• Responsible for delivering IT operations and projects aligned with global IT strategy 

What you bring:

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• Minimum of 15  years of experience in security engineering or related roles, with at least 5 years in leadership positions.
• Deep understanding of security principles, practices, technologies, and standards, with hands-on experience in designing and implementing security solutions.
• Strong knowledge of software development methodologies, including Agile, Scrum, and DevOps, with expertise in integrating security into the software development lifecycle.
• Ability to be hands on to implement security tooling, configurations & review code
• Experience with security tooling and automation, including vulnerability scanners, SIEM systems, intrusion detection/prevention systems, and security orchestration and automation platforms.
• Familiarity with cloud security concepts and technologies, such as AWS, Azure, or GCP, and container security solutions like Docker and Kubernetes.
• Excellent leadership, communication, and interpersonal skills, with the ability to influence and collaborate effectively with technical and non-technical stakeholders.
• Industry certifications such as CISSP, CISM, CSSLP, or equivalent, preferred.
• Fluency in English; proficiency in regional languages is a plus