Lead Infosec Engineer - GRC

About CoinDCX

India’s first crypto unicorn, CoinDCX leads Web3 innovation with a 125M+ user community, focusing on accessible, secure blockchain products.

Role Overview: Lead Infosec Engineer - GRC

You’ll lead governance, risk, and compliance (GRC) efforts in information security and privacy, ensuring CoinDCX meets global security standards and regulatory requirements.

Must-Have Skills & Experience

• 7+ years in information security/privacy, with 4+ years focused on security & privacy management
• Expertise in ISO 27001, ISO 27701, NIST CSF, GDPR, DPDPA, CCSS, and other frameworks
• Hands-on experience in risk assessments, audits (internal/external), and security awareness programs
• Strong communication skills with technical and non-technical teams
• Certifications like ISO 27001 LA/LI, CRISC, CISA, CISSP are a plus
• Knowledge of Cloud platforms (AWS, Azure, GCP) advantageous

Key Responsibilities

• Design, implement, and maintain security/privacy frameworks and certifications
• Conduct risk assessments, audits, and remedial actions
• Lead security awareness and training programs organization-wide
• Manage third-party risk assessments and continuous compliance monitoring
• Develop policies, dashboards, and reports for management review
• Mentor junior infosec team members and drive process improvements

Culture & Benefits

• Flexible, customizable perks and unlimited wellness leave
• Mental wellness support with counseling and workshops
• Bi-weekly learning sessions to fuel career growth
• Emphasis on ownership, innovation, and collaboration