Senior Cloud Security and compliance Engineer

Location: Hyderabad, India

Department: Security Services

Experience: 3

• Manage and maintain compliance programs across frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, Cyber Essentials and related regulatory standards using compliance automation platforms including Drata and Sprinto.
• Coordinate end-to-end audit activities, including evidence collection, auditor coordination, remediation tracking, and compliance readiness management.
• Conduct enterprise risk assessments, vendor security assessments (VASQ), and vulnerability management activities to identify and mitigate security and compliance risks.
• Administer and monitor security tools such as JumpCloud and Trend Micro, including access management, endpoint security monitoring, and incident response support.
• Perform vulnerability assessments and remediation tracking using tools such as AWS Inspector, Nmap, Detectify, and ZAP OWASP.
• Coordinate penetration testing engagements, track remediation activities, and support security improvement initiatives across customer and internal environments.
• Develop, review, and maintain security policies, procedures, runbooks, and compliance documentation aligned with industry standards and organizational requirements.
• Execute periodic security awareness training, phishing simulation campaigns, incident response exercises, and business continuity/disaster recovery testing.
• Conduct periodic administrative access reviews, log monitoring, and security control validations to ensure compliance with internal security standards and regulatory requirements.
• Collaborate with cross-functional teams, auditors, vendors, and stakeholders to support security operations, compliance initiatives, and continuous improvement activities.