Corporate Risk and Compliance - Associate II

About us: Build the future of banking. Zeta is a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences. Our impact runs at real-world scale. Today, over 25 million cards are live on Zeta-powered platforms across 7 countries, supported by a passionate team of 1,700+ Zetanauts across India, the US, EMEA, and Asia. Backed by SoftBank Vision Fund, Mastercard, and other reputed strategic investors, we reached a valuation of $2 billion in 2025. Our focus is on establishing product lines that focus on key outcomes by addressing real customer pain points, modernizing legacy systems, and strengthening core fundamentals. As a result, our systems and platforms support a wide range of banking and payments capabilities, including: 1. Tachyon, our cloud-native banking stack built for population-scale systems 2. Cipher, our unified authentication platform for secure, high-volume banking environments 3. Digital Credit as a Service, enabling banks to launch credit lines on UPI 4. Elena, our intelligent and conversational AI platform for banking 5. Pixel, India’s first digital-native credit card, launched in partnership with HDFC Bank, for whom we also revamped their PayZapp mobile app: Winner of the Celent Model Bank Award for Payments Innovation 2024 6. Sparrow, the leading card experience for non-prime cardholders in the US …and more across cards, payments, lending, and core banking. We are an engineering-first organization that values ownership, bias for action, and long-term thinking. Together, we solve some of the hardest problems in banking tech. Our culture is built around trust, collaboration, and creating the conditions for you to drive impact proportionate to your potential. Reinforcing our commitment to creating an inclusive and supportive workplace, we have been consistently recognized as a Great Place to Work. If you want to build cutting-edge banking tech that enables banks to serve millions reliably, securely, and at a population scale, Zeta is your playground. If you would like to learn more about how we have grown and evolved over the years, watch our journey here. You can also explore our website and follow us on LinkedIn, Instagram, YouTube, and X. About the Role: We are seeking a highly capable Level 2 Information Security professional who effectively bridges the gap between hands-on technical operations and governance. This role demands a unique combination of technical expertise across endpoint, network, and email security systems, paired with a Governance, Risk, and Compliance (GRC) mindset. Beyond managing technical controls, the ideal candidate must be an exceptional communicator capable of collaborating across diverse internal teams, managing security risk exceptions, and meticulously tracking open compliance and remediation items to closure. Responsibilities: • Develop and maintain security baselines and configuration checklists for Windows/macOS endpoints, corporate networks, firewalls, Microsoft 365, email security, and Data Loss Prevention (DLP). • Work with respective technical teams to perform periodic security assessments, identify gaps, and track remediation. • Perform or support vulnerability assessments and penetration testing, including validation of findings and remediation. • Prepare and maintain security assessment reports, technical documentation, SOPs, and compliance evidence. • Support internal and external audits by coordinating with Audit, Compliance, and technical teams. • Track security findings, vulnerabilities, and audit observations to ensure closure within agreed timelines. • Communicate identified security gaps and recommended remediation actions to relevant stakeholders. Skills: Hands-on experience in at least one security domain, with a good understanding of other enterprise IT security domains. • Microsoft Security: Understanding of Microsoft 365 security, Intune, Microsoft Defender, and identity access controls. • Networking: Understanding of LAN, WLAN, WAN, firewalls, network security, and secure configurations. • Email Security: Understanding of email routing, SPF, DKIM, DMARC, and anti-phishing controls. • Operating Systems: Good understanding of Windows, Linux, and macOS security and hardening. • Scripting: Basic scripting knowledge in Python, PowerShell, or Bash/Shell for automation and log analysis. • Security Assessments: Understanding of vulnerability assessment, penetration testing, endpoint security, and Identity and Access Management (IAM). • Security Frameworks: Familiarity with CIS Benchmarks, NIST, PCI DSS, and SOC 1/SOC 2 requirements. • Documentation: Ability to prepare security checklists, assessment reports, SOPs, and audit evidence. Experience and Qualifications: • 3 to 5 years of experience in Information Security, Risk & Compliance, Endpoint Security, Network Security or Technical GRC role. • Bachelor of Technology (BE/B.Tech) in Computer Science or equivalent • Certifications (At least one of the following or equivalent is required): • Identity & Cloud Security: Microsoft Certified Associate (SC-200, SC-300, or SC-900). • Security Fundamentals: ISC² CC (Certified in Cybersecurity), CompTIA Security+ or CEH (Certified Ethical Hacker). • Network Security: CCNA (Cisco), Certified Security Associate (Cisco/Check Point), NSE 4 (Fortinet), or JNCIA (Juniper). Zeta is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We encourage applicants from all backgrounds, cultures, and communities to apply and believe that a diverse workforce is key to our success.