Infosec Intern

About the Role

The Information Security Intern will be part of the Information Security team, reporting to the entity CISO. The role's primary objective is to assist the team in ensuring Setu's systems achieve and maintain a high standard in audit preparedness.

Key Responsibilities

• Implement, maintain, and improve a best-in-class information security, risk & compliance management framework.
• Ensure Setu achieves and maintains relevant certifications such as ISO 27001:2022, SOC2 Type 2, Data localization, and other relevant certifications and regulatory guidelines.
• Proactively recommend and plan for new certifications/audits beneficial to Setu.
• Manage customer assurance by responding to information security questionnaires and queries.
• Review Information Security clauses in partner agreements.
• Plan, prepare for, and conduct process-led internal, external, and vendor audits.
• Work alongside colleagues in Engineering and Customer Success to improve security compliance and reduce risks.
• Review and update security policies and standards regularly to keep pace with new threats and changing industry practices.
• Monitor internal and external security advisories impacting security, risk, and compliance requirements.
• Assist in managing and improving Setu's security, compliance, assessment, and testing programs.

Qualifications

• A fresher with a strong background and enthusiasm for information security.
• Foundational understanding of ISO 27001, SOC2, PCI DSS, RBI guidelines, and Data Localization concepts.
• Meticulous and detail-oriented, with patience for dealing with stakeholders and legacy infrastructure.
• Process-driven, with an ability to think of and implement processes that streamline complex handovers.
• Understands how to bring accountability into processes through checklists and sanity checks.

About Setu

Setu is an acquired entity of Pine Labs, working to reimagine financial products through APIs.

Why Setu?

• Opportunity to work closely with the founding team who built and scaled public infrastructure such as UPI, GST, Aadhaar.
• Fully stocked library and an unlimited book budget.
• Tickets to conferences and industry events.
• Learning sessions where team members and external experts teach new skills.
• Learning and development allowance for courses, subscriptions, and certifications.
• Benefits include comprehensive health insurance, personal accident insurance, access to mental health counselors, and a beautiful office.
• A diverse team where hiring is done purely on merit, skill, and competence.