Experience
6 - 11 yrs
Job Location
Hyderabad, India
Vacancy
1
Designation
Security Lead
Job Type
ONSITE
Job Description
Security Lead (GRC & AppSec)
Location: Hyderabad, India
Employment Type: Full-Time; Salaried
Compensation: Base Salary, Bonus, Stock Options, Medical
Why This Role Exists Innovapptive has zero security engineering today. 59 enterprise customers across regulated industries. Customers asking for SOC 2 compliance, pen test reports, security posture documentation. We have none.
You are the founding security hire. Build Security & Compliance from scratch: GRC, AppSec pipeline, vulnerability management, security culture. Hire and lead a 3-person team.
What You Own - Security program from zero: GRC framework, risk register, policies, vendor assessments.
- SOC 2 Type II readiness.
- AppSec pipeline: SAST/SCA in CI/CD. 100% repo coverage.
- Vulnerability management: 95% Crit/High resolved within 7/30 days.
- Security review for high-risk changes.
- Incident response playbook.
- Security awareness and training.
- Team building: AppSec Engineer now, Infra/Cloud in Q3.