Information Security Engineer

Senior Infosec Engineer
InCred Money Pune, Maharashtra, India (On-site)

Company:
Incred Money ()
Industry: Fintech / Financial Services

About
is a fast-growing digital wealth and investment platform empowering users with smart, simplified financial tools. We are passionate about financial inclusion, investor transparency, and secure digital experiences. As we scale, security remains central to our mission—and that's where you come in.

Role Summary
We are looking for a dynamic and hands-on Senior Infosec Engineer who will be responsible for leading and implementing our information security and cyber-risk strategy. The ideal candidate will have strong experience in fintech or financial services, knowledge of regulatory frameworks (like RBI, SEBI), and the ability to build secure digital systems while enabling growth and innovation.

Key Responsibilities
Own and lead the company's overall information security strategy.
Build and implement policies, procedures, and controls aligned with industry best practices (e.g., ISO 27001, NIST, OWASP).
Perform risk assessments, security audits, and regular vulnerability assessments of applications and infrastructure.
Collaborate with engineering, Dev Ops, and product teams to embed security into the SDLC.
Oversee data protection strategies (encryption, backups, data access) and ensure regulatory compliance (e.g., RBI, SEBI, GDPR, PCI-DSS if applicable).
Manage internal and external security audits and ensure remediation of findings.
Lead incident response planning and execution, including root cause analysis and post-mortem reviews.
Evaluate and onboard security tools (e.g., SIEM, WAF, DLP, endpoint security).
Build a security-first culture through training and awareness programs across teams.
Serve as the primary point of contact for security with partners, auditors, and regulators.

Key Requirements
4–7 years of progressive experience in Information Security, with at least 2 years in a leadership or ownership role.
Strong understanding of cloud security (AWS preferred), web/mobile application security, and data privacy.
Hands-on experience with firewalls, VPNs, intrusion detection/prevention systems, and endpoint protection tools.
Familiarity with regulatory and compliance frameworks (especially RBI/SEBI guidelines for fintech).
Bachelor's or Master's degree in Computer Science, Information Security, or related field. Industry certifications like CISSP, CISM, CEH, or ISO 27001 LA are a strong plus.
Excellent communication and stakeholder management skills.

Preferred Skills
Prior experience in fintech, wealth-tech, or BFSI domain.
Experience leading security in a startup or early-stage company.
Knowledge of Dev Sec Ops  practices and CI/CD pipeline security.