Information Security Associate

About the role

Glomopay seeks an Information Security Associate to build its InfoSec program from scratch, reporting directly to the Head of Information Security. The role involves owning security governance, compliance with RBI and IFSCA regulations, and hands-on implementation of SOC, SIEM, and cloud security on GCP. This is a full-time position based in Bengaluru, Karnataka, India.

What you’ll do

• Own the Information Security Management System (ISMS) and policy framework aligned with ISO 27001 and PCI DSS
• Lead compliance with RBI outsourcing directions, IFSCA circulars, and DPSC guidelines
• Build and manage the SOC function using MDR-augmented operations and mature hybrid capabilities
• Own SIEM strategy, integrating critical log sources and building detection use-cases
• Manage third-party risk through due diligence audits and maintain regulatory records
• Implement and manage DLP controls across endpoints, email, and cloud storage
• Drive network security posture including firewall rule reviews and Cloud IDS tuning on GCP
• Own incident management lifecycle and serve as primary contact during security incidents

What you’ll bring

• 4 years in information security with at least 3 years in a hands-on security role
• Experience preferably in regulated financial services (fintech, banking, NBFC)
• Deep working knowledge of PCI DSS, ISO 27001, and SOC 2
• Knowledge of Indian financial regulatory frameworks (RBI, IFSCA)
• Hands-on experience with GCP cloud security
• Practical expertise in PAM, SIEM, DLP, and endpoint hardening

Skills

Benefits

• Direct impact shaping the security foundation of India's first IFSCA-authorized PSP
• Full ownership to build the entire security program from scratch without inherited bureaucracy
• Access to modern stack including GCP, Terraform IaC, CrowdStrike, and Teleport PAM
• Role where security program acts as a strategic revenue enabler for banking partners