Information Security Officer

Location: Bengaluru

Who are we

Private markets have more potential than ever, yet are harder to win. Deal teams need a better system, not more tools.

Gain  is the private markets super app that connects AI-powered research, human-verified insight, and your team's proprietary intelligence in one platform, helping leading PE, advisory, and consulting teams source smarter, collaborate seamlessly, and execute with conviction.

Today, the world's leading private equity firms, advisors, and consultants use Gain to source smarter, collaborate seamlessly, and execute with greater confidence

Gain is trusted across more than $1 trillion of private capital, used by 100% of MBB and Big Four firms, and by over 70% of the world's top 20 M&A advisory houses.

Gain has been recognised as US Data Provider of the Year (PE Wire), Global Financial Market Review's Best Use of AI in Finance, one of Sifted's Top 100 Fastest-Growing Companies, and ranked in the Deloitte Technology Fast 50. Gain operates globally with offices in New York, London, Amsterdam, Frankfurt, Warsaw, and Bangalore.

What

The Role Entails

We are looking for an  Information   Security Officer  to own and continuously strengthen Gain's security, compliance, and data-protection posture as we scale globally. This is a hands-on role with real accountability: you will design, implement, and operate our security framework across the organisation.

You will work closely with other functions, including Engineering, Product, Finance/Risk/Legal, and play a critical role in supporting enterprise customer requirements, audits, and regulatory readiness.

Key responsibilities

Security & compliance ownership

Own and maintain our  SOC 2 (Type II)  control environment, including evidence collection, remediation, and auditor interaction.

Translate security requirements into pragmatic, scalable controls

Endpoint & access security

Own  MDM strategy and implementation  across laptops, mobile devices, and access controls.

Define and enforce device security, identity management, and least-privilege access.

Risk management

Identify, assess, and mitigate security risks across systems, vendors, and processes.

Lead incident response planning and execution when required.

Security operations

Maintain policies, procedures, and security awareness programmes.

Manage security tooling and third-party security providers.

Support customer due-diligence, security questionnaires, and enterprise onboarding.

Data protection & privacy

Support implementation of  data-privacy and data-protection requirements  (e.g. GDPR and related frameworks)

Partner with Legal and Product on privacy-by-design and customer security assessments.

What We're Looking For

Proven experience (minimum 2-3 years) in a  security, compliance, or risk role  within a SaaS or technology environment.

Experience with software engineering and Git

Hands-on experience with  SOC 2  (Type II)

Experience implementing and operating  MDM solutions

Solid understanding of cloud security, access control, and modern SaaS architectures

Exposure to data-privacy regulation and implementation is a strong plus
Comfortable operating independently in a fast-moving, scale-up environment

What do we offer

Competitive base salary with annual bonus linked to your performance/OKRs

Opportunity to grow with the company, gaining increasing responsibilities, supported by lots of coaching and a feedback-driven approach

Opportunity to be a part of a new and growing team that is a highly strategic part of our platform

Flexible hybrid working model

Culture of trust, ownership and standard of excellence

Does this sound like a perfect match

We are proud of our wonderful product and believe it has lots of potential. We are growing fast and having fun while building our platform and company. Does this sound like a team you would like to become a part of Reach out – we are excited to get to know you and show you what we do!

Gain.pro B.V., with its registered seat in Apollolaan 151, 1077 AR Amsterdam, The Netherlands, or another Gain.pro entity which runs the recruitment process, further called 'Gain', is the controller of personal data you submit as part of the job application. Your personal data will be processed for the purpose of conducting a recruitment process for the job position you apply for.

If you provide Gain with explicit consent, your personal data will also be processed for the purpose of conducting future recruitment processes. Please read the Gain Privacy Policy to acquaint yourself with how Gain processes your personal data: https://(Use the "Apply for this Job" box below).