About the Role

At Fivetran, we're on a mission to make access to data as simple and reliable as electricity. Our fully automated platform moves data from 700+ sources to any destination reliably and securely — powering the analytics, AI, and decision-making that drives modern businesses forward.

This role will be part of the GRC team. The Fivetran GRC team is responsible for ensuring the continuous integrity, confidentiality, and availability of customer data. Our customers trust us with their most sensitive information, and maintaining that trust is a critical, core component of both our product and our business.

We are seeking a motivated and detail-oriented Senior GRC Analyst to join our Security team. This role is ideal for a control-focused audit professional with a solid understanding of IT systems and infrastructure. Strong communication skills are essential, as is the ability to collaborate and influence across functions and levels of the organization. The position reports to the Director of GRC and will provide broad cross-functional exposure, working closely with teams across Security, Engineering, Operations, IT, and HR.

This is a full-time position based in our Bangalore office. We offer a hybrid work model that blends remote flexibility with in-person collaboration, with two days per week in office.

Technologies You’ll Use

• GRC platform for organizing, tracking, and managing controls, testing activities, and audit evidence
• Cloud platforms, including AWS, Azure, and GCP, for understanding and evaluating cloud-hosted environments and associated controls
• Jira for ticket management, workflow tracking, and cross-functional collaboration
• GitHub for version control and collaboration on security documentation and policy management
• Google Workspace for day-to-day productivity, documentation, and internal communication

What You’ll Do

• Conduct control walkthroughs, testing, and evaluation of IT general controls and application controls across a complex systems landscape, with coverage spanning ISO 27001, PCI-DSS, SOC 1, SOC 2, and other applicable frameworks
• Partner with cross-functional teams to design, implement, and continuously improve control processes and related documentation
• Support third-party vendor assessments, evaluating vendors against established security and privacy standards and requirements
• Develop, maintain, and update Information Security Policies and Standards in alignment with industry best practices and regulatory obligations
• Participate in IT SOX scoping, risk assessment, and control design activities, contributing to the organization's overall internal control environment
• Prepare and deliver clear, accurate internal status reports to communicate control findings, remediation progress, and program updates to relevant stakeholders

Skills We’re Looking For

• Demonstrated experience in security audit, IT audit, and risk management, with a strong understanding of control frameworks and audit methodologies. 
• Working knowledge of industry compliance frameworks, including NIST, ISO 27001, SOC 1, SOC 2, and PCI-DSS
• Familiarity with cloud technologies and environments, including one or more of GCP, AWS, and Azure, with an understanding of cloud-specific security and control considerations
• Strong analytical and technical problem-solving skills, with the ability to assess complex control environments and draw well-supported conclusions
• Proven ability to work collaboratively across functions, taking initiative and contributing constructively to shared team objectives
• Effective at managing multiple concurrent workstreams, with strong organizational skills and the ability to prioritize in a fast-paced environment
• Excellent written, verbal, and interpersonal communication skills, with the ability to present complex information clearly to both technical and non-technical audiences

Bonus Skills​

• Familiarity with FedRAMP compliance requirements and the associated authorization process and control framework
• Professional certifications in audit or information security, such as CISA, CISSP, AWS, or SANS GIAC designations, are strongly preferred
• Prior experience working at or directly with a Big 4 public accounting firm, with exposure to large-scale audit and advisory engagements
• Experience leveraging AI tools to build workflow automations and drive operational efficiencies within a GRC or security context

#LI-HYBRID

#LI-VM1

 Job Summary

We are seeking a highly motivated QA Automation Engineer to design, develop, and maintain automated testing frameworks while ensuring the quality of SaaS and eCommerce applications.

The role requires strong expertise in Salesforce and SAP systems, hands-on experience with automation tools, and a solid understanding of end-to-end business workflows. The ideal candidate is proactive, detail-oriented, and collaborative, with a focus on continuous improvement in an Agile environment.

What You'll do:

Automation & Test Execution

• Develop and maintain automated test scripts using Selenium, Playwright, or APEX.
• Design scalable automation frameworks for Salesforce and SAP integrations.
• Create and execute test cases including functional, regression, sanity, smoke, and exploratory testing.
• Identify automation opportunities to improve efficiency and reduce manual effort.

E-Commerce & Integration Testing

• Perform end-to-end testing across Salesforce (Sales, Service, Commerce Cloud) and SAP (FICO, BRIM, MM, GRC).
• Validate eCommerce workflows: product catalog, search, cart, checkout, pricing, promotions, and order management.
• Test integrations between Salesforce, SAP, and external systems (e.g., payment gateways).
• Ensure accurate data flow and business process validation across systems.

API, Performance & CI/CD

• Design and maintain API test automation for REST services using Postman/SOAP UI.
• Execute performance testing using JMeter or LoadRunner.
• Integrate automated test suites into CI/CD pipelines (Jenkins, GitLab CI/CD).

Defect Management & Quality Assurance

• Identify, log, track, and retest defects to ensure timely resolution.
• Perform production smoke testing post-deployment to ensure system stability.
• Maintain test suites (Smoke, Sanity, Regression) for optimal coverage.

Agile Collaboration & Test Management

• Participate in Agile ceremonies (Sprint Planning, Stand-ups, Grooming).
• Collaborate with developers, product owners, and stakeholders for requirement clarity and testability.
• Maintain test data, ensure environment readiness, and keep Jira updated with accurate statuses and comments.

Continuous Improvement & Mentorship

• Continuously improve testing processes, tools, and frameworks.
• Maintain clear documentation of test strategies and execution.
• Mentor team members and promote automation best practices.

Technical Skills

• Strong programming skills in Java or Python.
• Proficiency in JavaScript/TypeScript.
• Experience with Selenium, Playwright (preferred), and APEX.
• Expertise in API testing and performance testing tools.

Integration & Tools

• Strong understanding of SaaS applications and end-to-end integration testing.
• Experience with CI/CD tools (Jenkins, GitLab CI/CD) and version control (Git).
• Experience with Jira or similar tools.

What you bring:

Experience: Proven experience as a Test Automation Engineer or similar role with
hands-on experience in automated testing of Salesforce / SAP systems.

Technical Skills:

• Proficiency in modern web technologies (JavaScript/TypeScript).
• Strong programming skills in Java/ Python
• Hands-on experience with testing tools like Selenium, Playwright, APEX
• Good to have experience in Playwright.
• Expertise in API testing tools (Postman, SOAP UI) and performance testing (JMeter, LoadRunner).
• Integration Testing: Familiarity with SaaS applications and full-stack integration testing.

Tools & Platforms:

• Experience with CI/CD tools (Jenkins, GitLab CI/CD, CircleCI).
• Knowledge of version control systems like Git
• Preferred Qualifications:
• Familiarity with Agile/Scrum methodologies.
• Experience working in B2B SAAS Company.
• Expertise in security testing methodologies.

#LI-VG1

#LI-Hybrid

Here's a summary of the role:

If you're a compliance professional who believes that the best controls are the ones that run themselves — this one's for you.

As a Compliance Engineer on our Continuous Controls Assurance team, you'll sit at the intersection of compliance, engineering, and business process — your mission being to make compliance a living, automated reality rather than a periodic exercise. You'll inject compliance directly into how the business operates, building the evidence, signals, and automation that lets us prove we do what we say we do.

This role is particularly suited to candidates who have worked across compliance frameworks and technical environments — whether in SaaS companies, cloud-native organisations, or forward-thinking internal audit and GRC functions — and who are comfortable translating control requirements into code, pipelines, and data.

You'll play a central role in maturing our controls assurance program, moving us from point-in-time testing toward continuous, automated monitoring that scales with the business.

Here's a breakdown of what you'll do:

• Design and build automated controls — translate control objectives across frameworks such as SOC 2, ISO 27001, and PCI DSS into automated tests, scripts, and monitoring logic embedded in business and technical processes
• Own continuous controls monitoring — develop and maintain pipelines that continuously collect, evaluate, and surface control evidence, flagging exceptions and deviations in near real-time
• Embed compliance into the SDLC and business operations — partner with Engineering, DevOps, and business teams to integrate compliance checkpoints, policy-as-code, and configuration validation into CI/CD pipelines and operational workflows
• Bridge GRC and Engineering — translate compliance requirements into technical specifications, and translate system behaviour back into auditable evidence — acting as the connective tissue between the two disciplines
• Maintain the controls evidence repository — ensure control evidence is automatically captured, timestamped, and stored in a format that supports internal review and external audit
• Support audit and assurance activities — provide automated evidence packages for external audits, reducing manual effort and improving audit quality and speed
• Identify and close assurance gaps — conduct control gap assessments, recommend improvements, and own the remediation pipeline through to closure
• Collaborate on policy and standard development — ensure that policies are written in a way that can be operationalised and tested, feeding back where policy language creates ambiguity in controls design

These are the essentials you'll need to get an interview:

• Experience in a compliance, GRC, or information security role within a SaaS or cloud-native organisation
• Hands-on experience with one or more compliance frameworks — SOC 2, ISO 27001, PCI DSS, or similar
• Demonstrated ability to automate compliance processes — using scripting (Python, Bash, or similar), APIs, or tooling such as Drata, Vanta, Tugboat Logic, or equivalent
• Familiarity with cloud environments (AWS, GCP, or Azure) and the controls that govern them
• Strong analytical skills — able to decompose a control objective into testable, measurable components
• Excellent written communication — able to produce clear control narratives, test procedures, and evidence documentation

It would be great if you had these too, but we'll support you if you don't:

• Experience with policy-as-code tools (e.g. Open Policy Agent, Conftest, Checkov, or AWS Config Rules)
• Exposure to CI/CD platforms (e.g. GitHub Actions, GitLab CI, Jenkins) and how compliance gates can be embedded within them
• Familiarity with SIEM, log management, or observability tooling in a controls assurance context
• A background that spans both technical and compliance disciplines — e.g. a developer who moved into GRC, or a compliance analyst who learned to code
• Relevant certifications such as CISA, CISSP, CCSP, AWS Security Specialty, or equivalent

Okta is scaling internal AI and automation across the company—from employee productivity to building differentiated AI-native products. To make that scale real, we’re building platforms that democratize agent and automation development: secure, reliable building blocks that let teams ship AI-powered workflows faster, safely, and with confidence.

As a Staff Product Manager, AI & Automation Platform, you’ll lead product strategy and execution for the platform layer that enables internal builders (engineers, automation developers, analysts, and power users) to create and run agents, automations, and integrations—while meeting Okta’s high bar for security, reliability, compliance, and operational rigor. You’ll partner closely with your Bangalore Engineering POD and collaborate deeply with US-based product, security, and engineering stakeholders.

What you’ll bring :

Product Leadership and Platform Experience

• 8+ years of product management experience, with meaningful time owning platform products(developer platforms, internal platforms, infrastructure, integration/iPaaS, workflow automation, data platforms, or security platforms).
• Proven ability to deliver platforms that enable other teams to build products (strong “product for builders” intuition)
• Demonstrated success building products from scratch (0–1), including discovery, MVP definition, launch, and rapid iteration based on user feedback.
• Working knowledge of agentic/automation ecosystems: orchestration, tools/connectors, prompt/runtime considerations, evaluation, and iteration loops.
• Comfort partnering with engineering to make tradeoffs across usability, scalability, cost, and governance 
• Experience shipping products in environments with high security/compliance expectations.
• Strong grasp of concepts like RBAC/ABAC, audit logging, secrets management, data controls and operational reliability

What you will do : 

Own the platform product strategy

• Define the vision, roadmap, and success metrics for an AI & Automation Platform that enables internal teams to build, test, deploy, and operate agents and automations at scale
• Identify the highest-leverage platform capabilities(e.g., orchestration, connectors, governance, observability) that reduce time-to-value for internal AI initiatives.
• Translate company priorities into clear platform outcomes: adoption, reliability and security, developer velocity and cost efficiency

Build a “democratized” builder experience

• Deliver a cohesive builder journey across personas: engineers, automation developers, business ops, and internal product teams

Drive capabilities such as: 

• Reusable components (templates, agent patterns, workflow primitives)
• Connector ecosystems (SaaS + internal systems)Sandboxing and safe testing and demo environments
• Self-service onboarding and documentation

Make security and reliability built-in, not bolted-on

Partner with Security, IAM, and GRC stakeholders to ensure the platform supports:

• Policy-based access controls, secrets management, and least privilege
• Data handling standards (classification, retention, audibility)
• Guardrails for tool use, identity, and approvals (human-in-the loop where needed)
• Customer Zero
• Establish operational excellence: SLOs/SLIs, incident response expectations, resilience, and 
• observability across agent and automation execution.

Lead through influence across geographies

• Operate as the “connective tissue” between Bangalore execution and US stakeholder alignment.
• Run crisp product rituals: discovery, roadmap reviews, quarterly planning, and cross-functional decision forums.
• Drive alignment across multiple internal teams and dependencies without direct authority

Nice to have

• Experience with enterprise identity/security patterns (e.g., SSO, provisioning, authorization models
• Familiarity with integration platforms, workflow engines, or API ecosystems.
• Experience in building internal platforms in a large global company with strong compliance 

  #LI_Hybrid

  # P24740_3366445

The Challenge

Due to rapid growth and increased demand for our Privacy, Security, Data Governance, GRC, Third-Party Risk, Ethics and Compliance, and ESG platform, OneTrust is seeking a Senior UX Designer to join the User Experience Design team within our dynamic Research and Development team.   

This team continually improves the usability, design, and overall experience of OneTrust offerings, including web applications and other products and services. It is an excellent opportunity to improve the experience of an exceptionally wide range of users around the world.   

Your Mission 

Purpose of the Job :

As members of 6sense’s Security department, the Security Engineering team protects the platform across application, infrastructure, and cloud domains. The Vulnerability Operations function ensures that vulnerabilities are identified, triaged, validated, and remediated in a consistent, timely, and risk‑based manner. Senior Security Engineers work closely with Engineering, CloudOps, Product, and GRC teams to operationalize vulnerability management processes, build automation, standardize workflows, and ensure secure-by-default practices. 

Responsibilities & Accountabilities :

• Ensure vulnerability management tools (e.g., Wiz, Invicti, Rapid7, GHAS, Ox) are correctly configured for appropriate coverage and accurate detection. 
• Perform hands-on triage, validation, and root cause analysis of vulnerabilities across AppSec, InfraSec, and CloudSec. 
• Track and report vulnerability status against SLAs, escalating to engineering owners as needed. 
• Build and maintain dashboards, filters, reports, and triage scripts to support visibility and automation. 
• Assist engineering teams in reproducing and remediating vulnerabilities, providing actionable guidance. 
• Support the bug bounty program operations (not ownership), including validation and coordination with engineering teams. 
• Conduct security reviews and threat modeling for high-risk systems or changes. 
• Participate in initiatives that holistically address systemic or multi‑domain vulnerabilities. 
• Contribute to development of automated security testing pipelines for validation of fixes. 
• Participate in on-call or off‑hours incident response related to critical vulnerabilities and time‑sensitive patches. 
• Contribute to quarterly OKRs and security engineering roadmap initiatives. 

Performance Measurement :

• Understands 6sense’s product, architecture, cloud footprint, and environment in depth. 
• Takes ownership of vulnerability triage and prioritization while escalating where required. 
• Proactively identifies and escalates AI/ML‑related vulnerabilities or misconfigurations in systems integrating LLMs or automated decisioning. 
• Meets tight deadlines and SLAs for vulnerability response and validation. 
• Maintains accurate and up-to-date triage scripts, documentation, dashboards, and workflows. 
• Participates in weekly 1:1s and skip levels; provides clear progress updates. 
• Supports security engineers and development teams with accurate, actionable analysis. 
• Effectively participates in incident response and post‑incident remediation. 

Educational and Experience Requirements :

• 5+ years of experience in security engineering across vulnerability management, AppSec, CloudSec, or InfraSec. 
• Experience with vulnerability tools (e.g., Wiz, Rapid7, Invicti, GHAS, SAST/DAST) and triage workflows. 
• Understanding of cloud security (AWS preferred) and modern microservices architectures. 
• Experience identifying and mitigating AI/ML‑related security risks, including model abuse, prompt‑injection vulnerabilities, and risks introduced by LLM‑based features. 
• Experience with scripting/automation (Python, Bash, JavaScript, etc.). 
• Experience working directly with engineering teams to address vulnerabilities. 
• Familiarity with frameworks such as OWASP, NIST, CIS Benchmarks, MITRE ATT&CK. 
• Experience with IaC security (Terraform, CloudFormation, Pulumi) preferred but not required. 

Preferred Qualifications :

• Bachelor's degree in a related field 
• Relevant industry certifications, such as AWS, CNCF, and GIAC are highly desirable 

Competencies and Behaviors :

• Establishes strong credibility with engineering partners. 
• Maintains a professional, outcome-focused demeanor. 
• Advocates for vulnerability and security best practices. 
• Works independently on complex triage and analysis tasks. 
• Manages competing priorities effectively, escalating when appropriate. 
• Communicates clearly across technical and non-technical audiences. 
• Maintains accuracy, attention to detail, and documentation hygiene. 

About the role

The Governance, Risk, and Compliance Analyst is responsible for assisting in assessing third-party risk across Samsara’s new and existing systems and building automated workflows to support a scaling program.

You take Security seriously, but understand there is a business to operate and strive to build low friction solutions and decisions made in close partnership with others. On a typical day, you might work with Samsara’s legal or procurement team to discuss an ongoing review of a vendor, build and refine AI enabled workflows to scale the vendor risk program, and collaborate with teams in engineering to collect evidence for an upcoming audit.

This is a hybrid role based in Bengaluru. We are open to candidates currently residing anywhere within India; however, relocation assistance will not be provided.

You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact – helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development, countless opportunities to experiment and master your craft in a hyper growth environment.
• You’re energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-calibre team that will encourage you to do your best. 

In this role, you will: 

• Work with the local Senior Manager of Security Engineering to provide programmatic updates and communicate both program, third-party, and technical risk to the broader Information Security leadership team
• Drive automation and efficiency in the TPRM program through the use of third-parties, such as Zip and Vanta, and creating native solutions; ensuring security reviews and reassessments scale with company growth.
• Partner with Procurement, Legal, and Privacy to ensure vendor risks are identified, documented, and mitigated throughout the vendor lifecycle.
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices

Minimum requirements for the role:

• 3+ years of experience in the governance, risk, and compliance space
• Experience implementing or maintaining vendor-risk programs
• Experience performing security and maturity assessments
• Supporting the creation or maintenance of risk registers, compliance inventories, and control mappings across internal and external systems
• Ability to work with systems teams to collaboratively implement security controls across a diverse range of systems, such as Okta, Slack, Salesforce, and internal tooling
• Professional experience coordinating and interacting with external auditors, internal engineering teams, business stakeholders, senior leadership, and security operations teams on procurement activities, audit controls and compliance requirements
• Experience conducting vendor risk assessments, including reviewing security certifications, penetration tests, and policies.
• Strong understanding of vendor integration risks and permission scoping across SaaS platforms (eg. Slack, Google Workspace, and Salesforce)
• Ability to translate complex technical findings and requirements into clear business risks and requirements to non technical stakeholders.

An ideal candidate also has:

• Experience working with NIST Cybersecurity Framework profiles, SOC 2, ISO 27001, or similar frameworks
• Experience creating workflows through automation and AI assitance
• Experience working within common GRC and procurement platforms such as Zip and Vanta.
• Experience managing high volumes of vendor requests and competing priorities.
• Prior assessment experience in the Software-as-a-Service industry

#LI-hybrid 

 Who We Are: 

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at http://www.take2games.com.

The Challenge :

The Employee Relations Specialist will conduct investigations into workplace concerns across India and the broader APAC region, supporting positive employee engagement by providing guidance and recommendations to resolve employee concerns. This role will work closely with the HR Business Partners, Legal and Compliance teams to promote equity, company values and accountability in the workplace and to respond appropriately and fairly to employee concerns. Though the Employee Relations Specialist will focus on resolving investigations, complaints and disciplinary actions, they will also provide pragmatic HR advice and assist the broader team with other employment issues and cross functional efforts, described below.

What You’ll Take On:

• Conduct prompt and thorough investigations into sensitive employee relations issues across India and the broader APAC region, and make objective recommendations based on findings. Actively collaborating with the Internal Committee (IC) or the Grievance Redressal Committee (GRC) as required. The investigative process includes: conducting investigatory interviews, collecting/reviewing relevant evidence, writing investigation reports, and delivering debriefs with relevant stakeholders.
• Ensure consistent application of ER policies and procedures.
• Formally respond to sensitive concerns and allegations as required by internal processes and/or external agencies.
• Foster effective relationships with HR teams, Business Leaders, and Employment Legal.
• Coach HR Business Partners and Managers on how to appropriately manage and resolve performance concerns.
• Partner with team members throughout the People organization to communicate and educate on policies, procedures, and compliance.
• Support training and building policy content on ER compliance issues.
• Prepare employee separation notices and related off-boarding documentation.
• Analyze ER trends and conduct root cause analysis; Provide periodic reports to Human Resources Director and VP Global HR.
• Maintain various confidential HR records.
• Support employees with the Reasonable Adjustments process.

What You Bring :

• 2-4 years of relevant experience or an equivalent combination of education and experience.
• Knowledge of Indian regional laws and regulations relative to labor and employment issues, including but not limited to the POSH Act, Industrial Disputes Act, and state-specific Shops and Establishments Acts.
• Familiarity with, or a willingness to research and understand, labor regulations across other APAC countries to support regional ER cases is highly desirable.
• Ability to effectively communicate with people at all levels and from various backgrounds; Strong interpersonal skills.
• Modeling respectful and empathetic behavior in difficult and uncomfortable situations surrounding an investigation.
• Strong analytical and problem-solving ability.
• Strong advocate for fairness, diversity, and inclusion.
• Proven ability to handle multiple projects and meet deadlines.
• Good judgment with the ability to make timely and sound decisions.
• Creative, flexible, and innovative team player.
• Excellent written and verbal communication skills.
• Proven ability to effectively present information and respond to questions from employees, candidates, and groups of managers.
• Proficient in Google Suite, and HRIS systems; Workday and Navex experience a plus.

What We Offer You: 

• Great Company Culture. We pride ourselves as being one of the most creative and innovative places to work, creativity, innovation, efficiency, diversity and philanthropy are among the core tenets of our organization and are integral drivers of our continued success.
• Growth: As a global entertainment company, we pride ourselves on creating environments where employees are encouraged to be themselves, inquisitive, collaborative and to grow within and around the company.
• Work Hard, Enjoy Life. Our employees’ bond, blow-off steam, and flex some creative muscles – through corporate boot camp classes, company parties, our Office gaming spaces, game release events, monthly socials, and team challenges.
• Benefits. Benefits include, but are not limited to; Discretionary bonus, Provident fund contributions, 1+5 medical insurance + top up options and access to Practo online Doctor consultation App, Employee assistance program, 3X CTC Life Assurance, 3X CTC Personal accident insurance, childcare services, 20 days holiday + statutory holidays,
• Perks. Gym reimbursement up to INR1150 per month, wellbeing program with the chance to earn up to $93 per annum, charitable giving program, access to learning platforms, employee discount program’s plus free games and events!

• Please be aware that Take-Two does not conduct job interviews or make job offers over third-party messaging apps such as Telegram, WhatsApp, or others. Take-Two also does not engage in any financial exchanges during the recruitment or onboarding process,and the Company will never ask a candidate for their personal or financial information over an app or other unofficial chat channel. Any attempt to do so may be the result of a scam or phishing exercise. Take-Two’s in-house recruitment team will only contact individuals through their official Company email addresses (i.e., via a com email domain). If you need to report an issue or otherwise have questions, please contact Careers@take2games.com.*
• As an equal opportunity employer, Take-Two Interactive Software, Inc. (“Take-Two”) is committed to fostering and celebrating the diverse thoughts, cultures, and backgrounds of its talent, partners, and communities throughout its organization. Consistentwith this commitment, Take-Two does not discriminate or retaliate against any employee or job applicant because of their race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, and genetic information (including family medical history), or on the basis of any other trait protected by applicable law. If you need to report a concern or have questions regarding Take-Two’s equal opportunity commitment, please contact Careers@take2games.com. 

#LI-Hybrid

Overview of Role

As 66degrees continues its rapid growth, we are seeking a hands-on, highly technical IT Operations Manager to build and manage our internal IT Operations function. This is a critical management role responsible for the stability, integrity, and operational excellence of our core information technology systems.

Reporting to the Director/VP of Technology, you will take ownership of our cloud infrastructure, hardware assets, and our comprehensive portfolio of SaaS business applications, along with the team members dedicated to each of these IT subsets. You will build and mentor a team of talented IT engineers, establish and manage operational processes, and serve as the key escalation point for all IT Operations. The ideal candidate is a player and coach with a deep technical understanding of modern infrastructure and SaaS management, capable of leading a team, guiding technical strategy, and getting hands-on with the work when the need arises.

Key Responsibilities

Team Leadership & Management

• Build, manage, and mentor a high-performing IT Operations team, including Cloud Engineers, SaaS Administrators, and Subject Matter Experts (SMEs).
• Foster a culture of collaboration, innovation, and continuous improvement, providing professional development and growth opportunities for team members.
• Serve as the primary escalation point for the IT Operations team, providing technical guidance and resolving complex IT business issues.
• Develop and maintain Standard Operating Procedures (SOPs), and best practices for our global IT department.

Cloud Infrastructure Operations

• Oversee the administration, maintenance, and optimization of all internal Cloud Platform environments.
• Lead discussions with various teams regarding their use of internal cloud infrastructure to advise on best practices and methods to automate the provisioning and management of cloud resources.
• Ensure the availability, security, and cost-efficiency of our cloud infrastructure, including Compute Engine, GKE, Cloud Storage, BigQuery, Vertex AI, Gemini Enterprise, NotebookLM Enterprise, and others.
• Oversee the implementation of robust IAM policies, network security (VPCs, VPNs, firewalls), monitoring via the Cloud Operations suite, and logging.

SaaS & Business Systems Operations

• Lead the administration, integration, and optimization of our core corporate SaaS portfolio, including Google Workspace, Salesforce, Rippling, Atlassian, Slack, Google Partner Tools, Office 365, ChurnZero, Ramp, Asana, WiseStamp, EasyDMARC, GoDaddy, and others.
• Design and enforce a comprehensive Identity and Access Management (IAM) strategy using Rippling IT, including automated user provisioning/de-provisioning (SCIM, JIT) and adherence to the Principle of Least Privilege.
• Oversee the development and maintenance of our integration strategy, leveraging iPaaS solutions like Workato, Google Apps Script, and custom scripts to build robust, automated workflows between business systems.
• Partner with business departments (HR, Sales, Marketing) to understand their needs and own the technical implementation of their core platforms, while collaborating with team members to define shared platform ownership and accountability.

Collaboration, Strategy, Security

• Partner closely with the Security Operations team to implement "as-a-service" best practices, manage our MDM solution, and gather evidence for compliance audits.
• Collaborate with global teams on infrastructure initiatives and the rollout of internal frameworks, such as Dev vs. Prod delineation.
• Evaluate, select, and manage relationships with key IT vendors and service providers, ensuring they meet performance and contractual expectations.
• Partner with the Security team for GRC buildout (Drata) and Trust Center buildout (SafeBase).

Required Qualifications

• 8-10 years of progressive experience in IT Operations or Systems Engineering, including at least 4 years in a direct management capacity leading and mentoring technical teams.
• Strong leadership and English communication skills, with a proven ability to bridge time zones and cultural nuances while managing remote/offshore resources..
• Extensive experience managing a large portfolio of enterprise SaaS applications and implementing enterprise-wide IAM strategies using a central IdP (e.g., Rippling or Okta).
• Proven ability to architect high-level strategy and manage teams while remaining technical enough to execute alongside them and provide direct hands-on support.
• Technical proficiency in Infrastructure as Code (IaC), specifically using Terraform to automate cloud infrastructure management.
• Hands-on experience with enterprise integrations, either through scripting (Python, Bash, Google Apps Script) or via an iPaaS platform (Workato preferred).
• Deep expertise in Mobile Device Management (MDM) for at-scale corporate assets, BYOD environments, and Chrome browser management.
• Extensive hands-on experience across the entire Google stack, including GCP infrastructure at scale and advanced Google Workspace administration.
• Strong understanding of ITIL v4 frameworks, particularly in Change Management and Incident Response within a high-growth environment.
• Experience with CLI tools such as gCloud, GAM, Git, Docker, Homebrew, and others.

Preferred Qualifications

• Industry-recognized IT certifications (e.g., CompTIA A+, Network+, Security+, ITIL 4, CCNA, RHCSA, CCNP, PMP, CISM).
• Prior experience thriving in the fast-paced environment of a technology consulting or professional services firm.
• Experience establishing internal governance and access controls for Enterprise AI tools (e.g., Gemini Enterprise, Vertex AI, or NotebookLM).
• Proven track record of reducing manual IT service desk tickets by 30%+ through the implementation of "Low-Code/No-Code" automation or advanced iPaaS recipes.
• Direct experience partnering with SecOps through SOC2, ISO 27001, or HIPAA compliance audits using automated GRC platforms like Drata.
• Practical experience moving an organization toward a Zero Trust security model.
• Familiarity with Lifecycle Management (LCM) transitions, moving from manual onboarding to fully automated "Zero-Touch" provisioning.
• Experience applying Agile or Kanban methodologies to internal IT Operations to manage sprint cycles for SaaS integrations and infrastructure projects.
• Prior experience managing the IT side of Mergers and Acquisitions, including domain migrations, SaaS consolidation, and tenant-to-tenant transfers.

Overview of the Role

As 66degrees continues its rapid growth as a premier Google Cloud professional services partner, the security of our internal systems, employee identities, and client data is our top priority. We are seeking a hands-on, highly technical Manager of Security Operations (SecOps) to be the foundational leader of our new dedicated internal InfoSec operational function.

Reporting directly to our U.S. Director who leads our broader IT, IAM, and current Security infrastructure you will take ownership of our day-to-day security operations across a global workforce of 550+ employees. You will build and manage security monitoring processes, lead incident response for security alerts, enforce compliance frameworks, and serve as an escalation point and mentor for our global teams. The ideal candidate is someone who is both admin and security trained at scale.  We are looking for a person who can write a script to automate an alert in the morning and present a risk dashboard to leadership in the afternoon on new threat vectors.

Key Responsibilities

Security Monitoring & Incident Response

• Build, own and manage the daily operations of our security toolset (SIEM (Google SecOps or Splunk), EDR/XDR (SentinelOne), Email Security, Cloud Security, and Endpoint Security (Rippling MDM) Posture Management.
• Serve as the primary incident lead for system security events; investigate, contain, and remediate alerts, and lead post-incident post-mortems as they are requested.
• Develop, document, and maintain security playbooks and standard operating procedures (SOPs) for securing and hardening of our various solutions within the 66degrees tech stack.

Vulnerability & Posture Management

• Conduct continuous vulnerability scanning and coordinate patching/remediation cycles across endpoints, networks, and cloud environments (GCP, Azure, AWS).
• Partner closely with the U.S. Director to operationalize, enforce, and refine Zero Trust, Device Trust, Browser Trust, and Identity and Access Management (IAM) policies.
• Monitor, harden, and secure our core business applications such as but not limited to Google Workspace, Google Cloud Platform (GCP), Slack, Salesforce, and Rippling environments against misconfigurations, and unauthorized access.

Leadership & Global Enablement

• Act as the security subject matter expert and internal escalation point for the IT Service Desk team located in India, along with the broader global company teams.
• Train and upskill global teams on how  to perform "Tier 1" security triage (e.g., investigating phishing reports, basic malware alerts, account lockouts, and how to avoid IT worker scandals), creating a scalable company security framework.
• Foster a culture of security awareness across the company by leading regular employee training and simulated phishing campaigns (KnowBe4). Along with always advising on the principle of least privilege way of thinking.

Compliance & Risk

• Lead the technical GRC Buildout (Drata), Trust Center Buildout (SafeBase), evidence gathering, and control enforcement for external audits and compliance frameworks (e.g., SOC 2, ISO 27001).
• Assist the go-to-market and legal teams by filling out client security questionnaires and vendor risk assessments, directly accelerating our sales cycles.
• Track and report on key SecOps metrics (Time to Detect/Respond, patch compliance, etc.) to IT leadership

Required Qualifications

• Experience: 8-12+ years of progressive experience in Information Security, IT Security, or Security Operations, with at least 2-3 years in a team lead or management capacity.
• Cloud/SaaS Expertise: Deep technical understanding of Google Workspace administration and security, as well as cloud infrastructure security (specifically Google Cloud Platform / GCP).
• SecOps Engineering: Hands-on experience building, configuring, monitoring, and responding to alerts in EDR platforms (e.g., CrowdStrike, SentinelOne), SIEM platforms (e.g., Splunk, Google SecOps), and IAM platforms (e.g., Rippling, Okta, GCP, Entra, Azure, AWS, GWS).
• Compliance: Experience operating within compliant environments and supporting audits for SOC 2 Type II or ISO 27001 frameworks. Along with experience setting up and managing a GRC platform (e.g., Drata, Ostendio).
• Scripting: Proficiency in scripting (Python, PowerShell, Bash, or Google Apps Script) to automate repetitive security tasks and API integrations.
• Communication: Excellent English communication skills, with a proven ability to bridge time zones and cultural nuances while managing remote/offshore resources.

Preferred Qualifications

• Industry-recognized security certifications such as CompTIA Security+, CISSP, CISM, CCSP, or GCIA.
• Google Cloud Professional Cloud Security Engineer certification is highly desired.
• Google Cybersecurity Certificate is highly desired.
• Previous experience working in a professional services, consulting, or managed services firm.
• Previous experience building an at scale internal security team.

Here’s a summary of the role:

Looking to lead high-impact projects that transform how global organizations manage governance and compliance? This role puts you at the center of enterprise technology implementations, where you’ll own delivery, engage senior stakeholders, and drive real business outcomes.

You’ll bring your project management expertise to lead complex implementations, guide clients through change, and ensure successful adoption of solutions. If you enjoy working closely with customers, influencing decisions, and delivering measurable value—this is the role for you.

Here’s a breakdown of what you’ll do:

• Lead end-to-end project delivery for enterprise technology implementations
• Manage scope, timelines, risks, and stakeholder communication to ensure successful outcomes
• Act as a trusted advisor to clients, aligning solutions with business and compliance needs
• Drive client engagement, including workshops, training, and adoption strategies
• Partner with internal teams on solutioning, pre-sales, and delivery execution
• Identify opportunities to expand and grow client accounts through value-driven recommendations

These are the essentials you’ll need to get an interview:

• 5+ years of recent, hands-on Project Management experience
• Proven experience delivering large-scale technology implementations in enterprise environments
• PMP (or equivalent Project Management certification)
• Strong client-facing experience with the ability to manage senior stakeholders
• Excellent communication and influencing skills (presentations, workshops, stakeholder alignment)
• Experience managing end-to-end project lifecycle (planning, execution, rollout, adoption)

It would be great if you had these too, but we’ll support you if you don’t:

• Experience in GRC (Governance, Risk & Compliance) or related domains
• Exposure to entity management systems or similar platforms
• Strong business process improvement/problem-solving mindset
• Familiarity with AI tools or workflow optimization approaches

Here’s a summary of the role:

Ready to build real-world AI solutions that actually make an impact?

You’ll take cutting-edge AI and GenAI concepts—like copilots, agents, and intelligent workflows—and turn them into scalable, production-ready systems used across sales, finance, customer success, and more. If you enjoy hands-on backend engineering, working with APIs, cloud platforms, and LLMs, and transforming ideas into high-performing AI-driven products, this role puts you right at the center of innovation.

Here’s a breakdown of what you’ll do (not all of it, just the important stuff):

• Build and scale backend services, APIs, and integrations that embed AI/GenAI into enterprise systems (CRM, ERP, BI)
• Develop LLM-powered solutions such as RAG pipelines, copilots, agents, and automation workflows
• Take AI solutions from concept to production—design, build, test, deploy, and monitor
• Collaborate with architects and business stakeholders to turn requirements into practical AI implementations
• Create and manage data pipelines to enable reliable, high-quality AI workflows
• Ensure solutions are secure, scalable, observable, and aligned with best practices

These are the essentials you’ll need to get an interview:

• 5+ years of experience in software or solutions engineering with production systems
• Strong programming skills in Python, Java, C#, or Node.js
• Hands-on experience with APIs, integrations (REST/webhooks), and backend development
• Practical experience working with LLMs/GenAI tools (e.g., OpenAI, LangChain, or similar)
• Experience with cloud platforms (preferably AWS), CI/CD, and containerization
• Solid understanding of AI/GenAI concepts like prompt engineering, RAG, or agents
• Ability to translate technical solutions into business impact and collaborate across teams

It would be great if you had these too, but we’ll support you if you don’t:

• Experience integrating AI into CRM, ERP, or analytics platforms
• Familiarity with MLOps/LLMOps concepts such as model lifecycle and monitoring
• Exposure to machine learning or data analytics tools (e.g., Scikit-learn, dashboards)
• Experience working in global or distributed teams
• Knowledge of AI governance, security, and responsible AI practices

Here’s a summary of the role

Love working directly with customers and delivering impactful training experiences?

In this role, you’ll help customers unlock the full value of a leading SaaS product by delivering engaging, high-quality training sessions. You’ll work with a diverse set of clients—from SMBs to enterprise—guiding them through product capabilities, driving adoption, and ensuring an exceptional customer experience.

If you enjoy presenting, interacting with clients, and being at the forefront of customer success, this role is for you.

Here’s a breakdown of what you’ll do

• Deliver engaging product training sessions (1:1, group, and webinars) to global customers
• Drive product adoption by enabling customers to effectively use key features
• Build strong client relationships and ensure high customer satisfaction (CSAT)
• Manage a high volume of scheduled training sessions daily with strong time management
• Collaborate with Customer Success and onboarding teams to support customer lifecycle
• Track training outcomes and continuously improve delivery quality

These are the essentials you’ll need to get an interview

• 3–5 years of experience in customer training, enablement, or client-facing roles
• Proven experience delivering training sessions (virtual/classroom/webinars)
• Strong communication, presentation, and facilitation skills
• Ability to manage multiple sessions and schedules effectively
• Experience working directly with customers and handling live interactions
• High customer focus with the ability to adapt training based on audience needs
• Strong time management and organizational skills

It would be great if you had these too (nice to have)

• Experience in SaaS, product-based, or technology environments
• Familiarity with tools like Salesforce, Gainsight, or webinar platforms
• Exposure to upselling or identifying customer growth opportunities
• Experience working with global customers across segments

What makes this role exciting?

• Work with a wide range of global clients (SMB → Enterprise)
• Be part of a high-impact, customer-facing role driving real product adoption
• Join a fast-paced, collaborative training team with strong visibility
• Opportunity to build expertise in SaaS products and customer success

Role Overview
You’re a Salesforce Business Analyst who loves turning messy, complex business needs into clean, scalable Salesforce solutions. In this role, you’ll be the key link between stakeholders and the Salesforce engineering team, owning requirements end-to-end across Service Cloud, Sales Cloud and Experience Cloud.

You’ll spend your time understanding how the business really works, designing smart configurations using objects, flows and automation, and making sure what gets built in Salesforce is clear, testable and delivers real value. You’ll work in a global, Agile environment, partnering with teams across APAC, EMEA and the US, and have a direct impact on the quality, reliability and usability of the Salesforce platform that powers the business.

Here’s a breakdown of what you’ll do (not all of it, just the important stuff)

• Lead requirement discovery across Service Cloud, Sales Cloud and Experience Cloud, and translate needs into Salesforce-led solutions.
• Turn business requirements into clear, testable user stories in Jira, with strong acceptance criteria and supporting documentation.
• Collaborate closely with Salesforce developers and testers to reduce ambiguity, minimise rework and keep delivery on track.
• Review and refine Salesforce configuration (objects, fields, flows, validation rules, automations) to align with business processes and data model.
• Support and sometimes execute testing, ensuring stories meet the definition of done and are ready for deployment.

These are the essentials you’ll need to get an interview

• At least 3 years working specifically as a Salesforce Business Analyst (not just a general BA role).
• Hands-on experience with Salesforce Service Cloud and Sales Cloud, including configuration, standard/custom objects, flows and data model.
• Solid understanding of Salesforce automation tools (Flows, Process Builder, validation rules) and how they support end-to-end business processes.
• Ability to read and interpret Salesforce metadata and understand core deployment concepts enough to explain technical constraints and options to stakeholders.
• Experience working in Agile teams using Jira for managing user stories, subtasks and acceptance criteria.
• Strong written and verbal communication skills, with the ability to work independently and drive clarity among diverse stakeholders.

It would be great if you had these too, but we’ll support you if you don’t

• Exposure to CPQ, RevOps, CLM or e-signature tools such as DocuSign in a Salesforce context.
• Experience in a global SaaS environment, working with distributed teams and stakeholders.
• Familiarity with Salesforce deployment tools (for example, Gearset or Copado) or relevant Salesforce certifications (Administrator, Business Analyst, or similar).

Role Overview
You’ll be the technical lead behind highly available private cloud platforms that power large-scale SaaS services. As a Staff Site Reliability Engineer, you’ll design and run VMware-based infrastructure, automate everything you can, and make sure critical systems stay fast, resilient, and secure.

You’ll work across VMware, Linux, Windows Server, Active Directory, networking, storage, and automation tooling to solve complex infrastructure problems at scale. You’ll set the standard for reliability and engineering quality, drive modernization of legacy stacks, and partner with other SRE, network, security, and DevOps teams to deliver robust, enterprise-grade platforms.

Here’s a breakdown of what you’ll do (not all of it, just the important stuff):

• Design, operate, and improve VMware-based private cloud infrastructure across multiple datacenter environments.

• Build automation that reduces manual effort, improves consistency, and strengthens operational reliability across infrastructure services.

• Administer and troubleshoot Linux and Windows Server platforms that support critical business and customer-facing workloads.

• Support core infrastructure integrations including Active Directory, DNS, authentication services, networking, storage, and load balancing.

• Drive improvements in platform resilience, performance, security, and compliance through engineering best practice and infrastructure modernization.

• Work closely with network, security, SRE, and DevOps teams, while contributing technical leadership, documentation, and mentoring to strengthen engineering standards.

These are the essentials you’ll need to get an interview: 

● Strong experience in systems engineering or infrastructure roles, including significant time operating at a senior or staff level.

● Deep hands-on expertise with VMware vSphere, including ESXi, vCenter, HA, DRS, vMotion, and distributed switching.

● Advanced Linux systems administration skills, including troubleshooting, hardening, patching, and performance tuning.

● Practical experience with Windows Server and Active Directory, including DNS, Group Policy, and authentication services.

● Proven ability to build automation using tools such as PowerShell, PowerCLI, Python, Ansible, or similar.

● Strong enterprise datacenter knowledge across compute, storage, networking, monitoring, and operational support.

● Excellent problem-solving skills, with a focus on reliability, scalability, and improving how infrastructure is run.

It would be great if you had these to, but we’ll support you if you don’t:

● Experience with F5 BIG-IP, AVI / NSX Advanced Load Balancer, or similar application delivery platforms.

● Exposure to technologies such as Pure Storage, Cisco UCS, or comparable enterprise datacenter platforms.

● Familiarity with Terraform, Jenkins, Azure DevOps, Git, or CI/CD tooling used in infrastructure automation.

● Understanding of security and compliance frameworks such as CIS, NIST, or ISO in an infrastructure operations setting.

Here’s a summary of the role:

Build end-to-end scalable applications, from intuitive React frontends to high-performance Node.js microservices, while leveraging AI to move faster and smarter. You’ll work across the full stack using React, Node.js, TypeScript, and AWS serverless to deliver modern SaaS solutions. This role is ideal if you enjoy owning features from UI to backend, using AI tools to boost productivity, and solving real-world engineering challenges with clean, scalable architecture.

Here’s a breakdown of what you’ll do:

• Build and deliver full-stack features using ReactJS, Node.js, and TypeScript
• Design and develop secure, scalable backend services using AWS serverless
• Own features end-to-end—from frontend UI to backend APIs and deployment
• Use AI tools to accelerate development, debugging, and testing while ensuring quality
• Collaborate with Product, Design, DevOps, and Security teams to deliver seamless user experiences
• Contribute to architecture decisions and mentor team members on best practices

These are the essentials you’ll need to get an interview:

• 5–7 years of experience as a full-stack engineer in an agile environment
• Strong hands-on expertise in ReactJS (mandatory) and modern frontend development
• Solid experience with Node.js and TypeScript for backend/API development
• Experience building and deploying applications on AWS (serverless preferred)
• Practical exposure to AI tools (LLMs, prompt engineering) in development workflows
• Good understanding of databases (SQL/NoSQL) and system design fundamentals
• Experience with CI/CD, Docker, and modern development practices

It would be great if you had these too, but we’ll support you if you don’t:

• Experience with microservices architecture and event-driven systems
• Exposure to RAG, vector databases, or AI-powered applications
• Familiarity with infrastructure as code (CDK/Terraform)
• Understanding of AI governance, privacy, or ethical considerations

Role Overview
You’re a professional services leader who loves using technology to solve complex business problems and create an outstanding customer experience. In this role, you’ll partner with senior stakeholders in Risk, Audit, and Compliance to turn their challenges into smart, scalable solutions that deliver real value.

You’ll lead end-to-end delivery of enterprise projects, guide customers through their GRC and audit transformation, and make sure they get the very best from their technology investment. You’ll also shape how services are delivered, coach a talented team, and play a key role in growing a high-performing, customer-obsessed practice.

Here’s a breakdown of what you’ll do (not all of it, just the important stuff)

• Lead complex, multi-stakeholder implementations for Risk and Audit teams, from discovery through go-live and adoption.
• Manage multiple client engagements, owning scope, timelines, budgets, and outcomes to ensure successful delivery.
• Design and drive technology-enabled solutions that improve risk management, internal controls, and audit effectiveness.
• Partner closely with Sales and Customer Success to shape proposals, support pre-sales, and identify opportunities to expand client use cases.
• Coach and mentor consultants on project management, client engagement, and domain best practices.
• Contribute to practice-building initiatives that enhance delivery methods, tools, and overall service quality.

These are the essentials you’ll need to get an interview

• Bachelor’s degree in a relevant discipline.
• 10+ years' experience managing projects or services, with significant hands-on experience in Enterprise Risk Management and/or Internal Audit.
• Experience with GRC or audit management platforms and how they support risk, control, and assurance processes.
• Proven experience leading teams or acting as a people manager in a consulting, professional services, or enterprise delivery environment.
• Strong data analysis skills, including working with large or complex data sets to inform decisions and insights.
• Experience delivering or supporting enterprise software implementations or complex systems/integration projects.
• Confident communicator and presenter, able to influence senior stakeholders and explain complex topics clearly.
• A commercial, outcomes-focused mindset with the drive to deliver value and build long-term client relationships.

It would be great if you had these too, but we’ll support you if you don’t

• A track record of growing client accounts or identifying new use cases and opportunities within existing customers.
• Recognition as a subject matter expert (formal or informal) in risk, audit, or related domains, with an interest in thought leadership.

Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy.

We are seeking a highly motivated Senior Corporate Security Analyst to join Toast’s Corporate Security team in Bangalore. This role is focused on hands-on corporate security execution and risk reduction across endpoints, identities, SaaS platforms, vendors, and data — not SOC monitoring or shift-based operations.

The ideal candidate has strong experience working in enterprise corporate security environments, understands how to balance security controls with business needs, and is comfortable partnering with IT, GRC, Procurement, Legal, and Engineering teams. You will own multiple CorpSec programs end-to-end and act as a senior individual contributor, while mentoring junior analysts and helping scale security practices across the organization.

A Day in Life (Responsibilities)

1. Corporate Security Execution & Risk Management

• Own and operate key corporate security controls across endpoint, SaaS, identity, vendor, and data security.
• Perform security risk assessments for business initiatives and translate findings into actionable remediation plans.
• Act as a security advisor to internal stakeholders, focusing on practical risk reduction.

2. Endpoint & SaaS Security

• Lead day-to-day security oversight for corporate endpoints and SaaS applications, including:
• EDR/XDR, device hardening, encryption, MDM/UEM
• Shadow IT discovery and SaaS risk reviews
• Partner with IT Operations and Governance teams to resolve alerts, misconfigurations, and policy gaps.
• Conduct periodic reviews of high-risk applications, browser extensions, and endpoint findings.

3. Vulnerability Management (Corporate Scope)

• Drive vulnerability management for corporate endpoints and internal business systems.
• Triage and prioritize vulnerabilities based on business impact and exploitability.
• Track remediation with IT teams and validate closure.

4. Identity & Access Management (IAM)

• Support enterprise IAM governance, including:
• Joiner / mover / leaver processes
• Access reviews and least-privilege enforcement
• MFA, SSO, device trust, and privileged access (PAM)
• Assist in access investigations and high-risk access exception reviews.

5. Vendor & Third-Party Security

• Conduct vendor security assessments for onboarding and periodic reviews.
• Review SOC 2 reports, security questionnaires, and supporting evidence.
• Track vendor risks, remediation actions, and re-assessments.
• Partner with Procurement, Legal, and GRC teams to ensure security requirements are met.

6. Data Protection & DLP

• Support data protection initiatives across Google Workspace, Slack, and other collaboration platforms.
• Assist with the design, tuning, and enforcement of DLP controls.
• Participate in investigations related to data exposure or misuse.

7. Security Awareness & Process Improvement

• Support security awareness training and phishing simulation programs.
• Maintain CorpSec policies, SOPs, and runbooks.
• Identify opportunities to improve efficiency through automation and tooling.

8. Mentorship & Ownership

• Mentor P2-level security analysts and provide technical guidance.
• Take ownership of CorpSec initiatives and deliver them end-to-end with minimal supervision.

9. Contractor Security Oversight

• Establish and enforce contractor access standards, ensuring strict security controls during onboarding and offboarding.
• Conduct periodic contractor access and activity audits, identifying and mitigating associated risks.

Work Mode: This role follows a hybrid work model, requiring a minimum of 2 days per week in the office.

What We’re Looking For

Required

• 6–10 years of experience in information security with strong corporate security exposure.
• Hands-on experience with:
• Endpoint security and EDR tools (e.g., CrowdStrike)
• Vendor security assessments and SOC 2 reviews
• IAM concepts (Okta, PAM, access reviews)
• SaaS and Shadow IT security
• Strong understanding of security frameworks (NIST CSF, ISO 27001, CIS Controls).
• Experience working closely with IT and governance teams.
• Strong written and verbal communication skills.

Preferred

• Experience with Google Workspace security and DLP.
• Exposure to GRC processes or platforms (ServiceNow GRC, OneTrust).
• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• Proven experience in developing and implementing security policies, procedures, and frameworks.Demonstrated experience in developing and delivering security awareness training and phishing exercises.
• Possess excellent skills and experience in leveraging AI tools for threat detection, incident response, vulnerability management, and other security functions.
• Familiarity with Google Workspace security features.
• Proficiency with security tools such as Reco.AI, Torq, Splunk, DataDog, bug bounty platforms, Okta Device Trust, BeyondTrust, BeyondCorp, and other SIEM, SOAR and Security tools commonly used in the market.
• Ability to work autonomously and prioritize multiple tasks in a fast-paced environment.
• Excellent verbal and written communication skills, with the ability to effectively communicate technical information to both technical and non-technical audiences. Proven ability to collaborate effectively with cross-functional teams.
• Quick learner and adaptable to new security tools and technologies as they are procured and implemented.
• Ability to adapt to environments, understand requirements, and actively collaborate within the team, with other teams, and with vendors.
• Provide technical guidance and mentorship to P2 security analysts, fostering their professional growth and ensuring alignment with corporate security objectives.
• Take initiative in leading projects and driving security initiatives.
• Relevant security certifications are a plus.

AI at Toast

At Toast, one of our company values is that we're hungry to build and learn. We believe learning new AI tools empowers us to build for our customers faster, more independently, and with higher quality. We provide these tools across all disciplines, from Engineering and Product to Sales and Support, and are inspired by how our Toasters are already driving real value with them. The people who thrive here are those who embrace changes that let us build more for our customers; it’s a core part of our culture.

Our Total Rewards Philosophy 
We strive to provide competitive compensation and benefits programs that help to attract, retain, and motivate the best and brightest people in our industry. Our total rewards package goes beyond great earnings potential and provides the means to a healthy lifestyle with the flexibility to meet Toasters’ changing needs. Learn more about our benefits at https://careers.toasttab.com/toast-benefits.

Position Overview:  

As a Staff Software Engineer at Diligent, you’ll create robust, scalable, and secure microservices that power our SaaS platform for governance. You’ll leverage AWS (serverless or migrations) with TypeScript, own services end-to-end (code, deployment, monitoring), drive architecture discussions, and regularly demo to the department. A critical part of this role is shaping our AI strategy: you’ll lead design decisions, embed AI responsibly into systems, and mentor teams on AI capabilities, safety, and governance. 

Key Responsibilities: 

• Champion the design and delivery of secure, high-performance microservices on AWS, driving architecture decisions and empowering team members through mentorship. 

• Set technical direction across multiple teams, spotting system pain points and proposing improvements. 

• Pioneer AI-driven solutions by advising on model capabilities, crafting effective prompt strategies, and embedding governance and monitoring into development workflows. 

• Partner with Product, Security, and DevOps to shape technical roadmaps, ensure compliance, and seamlessly integrate AI features that deliver real business value. 

• Continuously elevate our toolkit by evaluating and piloting cutting-edge technologies (including AI toolchains), optimizing for performance, cost efficiency, and developer productivity. 

• Own projects end-to-end—from ideation and prototyping to deployment, monitoring, and iteration—ensuring resilient, maintainable systems and top-notch code quality. 

• Mentor engineers in best practices and AI-augmented workflows, fostering a culture of experimentation, learning, and ethical AI adoption. 

• Stay ahead of emerging AI trends and regulations, proactively adapting designs and practices to meet evolving standards and steer future innovation. 

Required Experience/Skills  

• 7–10 years delivering secure, scalable applications in agile environments. 

• Understanding of model architectures (e.g., transformer vs. retrieval-augmented), bias and safety concerns, prompt engineering, and proven experience shaping AI strategy and mentoring teams on responsible AI use. Ability to architect AI systems with embedded monitoring and governance. 

• Design and review scalable, high-performance system architectures, APIs, and data models, while writing high-quality, testable code in Node.js, React, and TypeScript/JavaScript, including reusable libraries and frameworks. 

• Lead end-to-end DevOps and platform engineering, including CI/CD pipeline design with strong guardrails, infrastructure-as-code and modern deployment strategies, cloud observability and incident response, and cost-aware architecture and capacity planning across AWS, Azure, and GCP 

• Integrates security best practices (IAM, secrets management) into all work, including AI components, and embeds bias/privacy checks in delivery pipelines. 

• Strong communication of technical and AI-related concepts to diverse stakeholders; proven ability to lead projects, influence engineering culture, and mentor peers in AI-augmented workflows. 

• Degree in Computer Science, Engineering, Mathematics, or equivalent experience. 

 *** Only Bangalore candidates may apply

About the Role

We are looking for a Senior Software Engineer to drive technical excellence, architect complex systems, and elevate our engineering team. You will own critical technical decisions, lead major initiatives from conception to delivery, and set the standard for engineering quality across our products - primarily working with our .NET-based application portfolio, AWS and Windows infrastructure.

What You'll Do

• Lead the design, architecture, and enhancement of .NET applications and Windows-based systems
• Drive technical initiatives from requirements gathering through production deployment on on-premise and cloud infrastructure
• Make critical architectural decisions balancing performance, scalability, cost, and maintainability
• Optimize and maintain ASP.NET applications, Windows Server environments, and enterprise databases
• Debug and resolve complex production issues across the application stack
• Establish engineering best practices, security patterns, and quality standards for enterprise applications
• Good to have: Explore opportunities to integrate AI capabilities (MCP servers, RAG systems, agentic workflows) where they add value to existing applications

Required Qualifications

Tech Stack

Core: .NET MVC, ASP.NET, C#, Windows Server, MSSQL, PostgreSQL, React, TypeScript, Docker, AWS
Good to Have: Node.js, Python, AI/ML frameworks (MCP, AWS Bedrock, LangGraph/Semantic Kernel, Vector Databases)

Core Technical Skills

• 5+ years professional development with proven track record of delivering complex enterprise systems
• Strong .NET (C#) development and architecture expertise - this is critical
• Deep experience with Windows Server administration, IIS, and on-premise application deployment
• Expert-level ASP.NET (Web Forms, MVC) and .NET Framework knowledge
• Advanced React and frontend architecture skills
• Extensive MSSQL and PostgreSQL database design, optimization, and performance tuning
• Strong understanding of microservices, distributed systems, and API design
• Mastery of software design patterns, clean code practices, and refactoring techniques
• Strong AWS architecture experience
• Good to have: Node.js

AI/ML Knowledge (Good to Have)

• Good to have: 1+ years hands-on experience building and deploying production AI/ML features
• Good to have: Python development with AI/ML framework expertise
• Good to have: Experience with AWS Bedrock, MCP servers, or AI integration architectures
• Good to have: Understanding of prompt engineering, RAG systems, or agentic AI workflows
• Good to have: Familiarity with AI evaluation frameworks, monitoring, and security considerations

Technical Leadership

• Leads technical design discussions and drives consensus
• Identifies systemic issues proactively across application systems
• Makes sound judgment under uncertainty
• Mentors junior engineers on .NET best practices and architectural patterns
• Champions modernization and improvement efforts while maintaining stability of production systems

Note: This role primarily focuses on maintaining and evolving our .NET applications portfolio. AI/ML experience is a valuable bonus - we're looking for strong .NET engineers who can own complex enterprise systems and potentially explore AI integration opportunities as they arise.