Senior Cybersecurity Engineer

at Convera

Pune- WFH

About the role:

As part of the Security Operations team, you’ll be working with fellow team members and other engineering groups to implement new security solutions and ensure that our current processes and tools are running smoothly. This is a hands-on role that will help shape and develop our new cloud infrastructure security monitoring. This position reports into the Director of Security Operations who reports into the CISO.

What we’re really looking for:

We’re looking for a motivated security professional who enjoys building systems, integrating toolsets and AWS cloud security best practices. As mentioned, this is a hands-on role which will be crucial to building out and maturing our SIEM solutions.

Job Responsibilities

• Responsible for the implementation, administration, and maintenance of the SIEM platform.
• Ensure data quality and identify any gaps in the security event collection.
• Detect and respond to company-wise security incidents when needed.
• Monitor SIEM health, monitor usage, and data growth.

Desired background

• 5+ years of experience in a security operational or analyst role preferably in a cloud native or hybrid cloud organization.
• Strong background in cybersecurity, particularly in Security Information and Event Management (SIEM) systems related roles.
• Detailed functional knowledge in developing security playbooks and implementing for orchestration, automation, and response.
• Familiarity with SumoLogic is a plus but not a requirement.
• High level software development skills: basic scripting, functional programming experience, familiarity with code repositories and deploy pipelines, etc.

About Convera
Convera is the largest non-bank B2B cross-border payments company in the world. Formerly Western Union Business Solutions, we leverage decades of industry expertise and technology-led payment solutions to deliver smarter money movements to our customers – helping them capture more value with every transaction. Convera serves more than 30,000 customers ranging from small business owners to enterprise treasurers to educational institutions to financial institutions to law firms to NGOs.
Our teams care deeply about the value we bring to our customers which makes Convera a rewarding place to work. This is an exciting time for our organization as we build our team with growth-minded, results-oriented people who are looking to move fast in an innovative environment. 
As a truly global company with employees in over 20 countries, we are passionate about diversity; we seek and celebrate people from different backgrounds, lifestyles, and unique points of view. We want to work with the best people and ensure we foster a culture of inclusion and belonging.

We offer an abundance of competitive perks and benefits including: 
•    Competitive salary
•    Opportunity to earn an annual bonus. 
•    Great career growth and development opportunities in a global organization
•    A flexible approach to work

There are plenty of amazing opportunities at Convera for talented, creative problem solvers who never settle for good enough and are looking to transform Business to Business payments. Apply now if you’re ready to unleash your potential.

#LI-AK1

About the Role

We are seeking a Data Governance & AI Trust Manager to define and operationalize the governance framework that enables high‑quality, well‑governed data to safely and effectively power GenAI agents, copilots, and analytics across the company.

As the organization accelerates adoption of Generative AI, the quality, structure, provenance, and clarity of corporate operating data have become critical enablers of AI performance, trustworthiness, and value. This role exists to ensure that the company’s operating data ecosystem is intentionally designed, consistently governed, and fit for AI‑enabled use cases, rather than fragmented, ambiguous, or ad‑hoc.

This role reports to the CISO & CIO and operates as a cross‑functional data governance authority across all company content. It does not own or manage the data itself; content ownership remains with business and platform owners. Instead, this role defines the standards, policies, and operating expectations under which data is created, managed, shared, retained, and made eligible for analytics and GenAI use.

A core responsibility of the role is to set the vision for the company’s internal data ecosystem—including how platforms such as SharePoint, Confluence, Jira, Slack, Teams, and related systems should be used together—and to establish clear operational standards (for example, when content belongs in SharePoint versus Confluence, and how that decision impacts AI use).

Governance is expected to be operationalized through native platform controls and existing enterprise tooling, rather than through standalone or heavyweight governance systems. The role translates governance principles into practical, enforceable standards that improve data quality, reduce ambiguity, and materially improve GenAI outcomes.

This is not a traditional data engineering or compliance analyst role. Success requires strong program ownership, the ability to drive cross‑functional alignment without direct authority, and sound judgment at the intersection of data quality, AI trust, security, and business operations.

Your Day‑to‑Day

Governance Framework Design & Ownership

• Own and evolve the company’s Corporate Operating Data Governance framework
• Define governance standards for unstructured and semi‑structured data across collaboration and productivity platforms
• Establish clear ownership models (Data Owners, Data Stewards, Custodians) for operating data domains
• Ensure governance practices enable business velocity rather than obstruct it
• Operationalize governance through native platform capabilities (e.g., metadata, permissions, retention, labeling, workflows) rather than standalone governance tooling

Metadata, Classification & AI Eligibility

• Define and maintain metadata standards, including:
  • Data classification
  • Purpose of use
  • Lifecycle state
  • AI eligibility and exclusion rules
• Partner with Security and Legal to ensure alignment with privacy, regulatory, and contractual obligations
• Embed metadata and classification standards directly into existing platforms rather than creating parallel systems

Data Quality & Trustworthiness

• Establish fitness‑for‑purpose data quality expectations for corporate operating data
• Define quality signals for:
  • Accuracy
  • Completeness
  • Timeliness
  • Consistency
• Partner with business teams to identify high‑risk or high‑impact data domains
• Ensure AI‑enabled experiences are grounded in authoritative, explainable, and traceable data sources

Lifecycle, Retention & Risk Management

• Define lifecycle expectations for operating data, including creation, maintenance, archival, and deletion
• Coordinate retention and defensibility standards to support legal, compliance, and audit needs
• Reduce long‑term risk from unmanaged or over‑retained unstructured data
• Support eDiscovery and investigation readiness through clarity and traceability

Cross‑Functional Execution & Enablement

• Drive accountability across Product, Engineering, Security, Legal, IT, and Business teams
• Establish practical governance cadences, reporting, and decision forums
• Provide authoritative guidance and operating standards while enabling teams with clear, pragmatic direction
• Foster a data‑aware and AI‑responsible culture through enablement and education rather than enforcement alone

What You Bring to the Team

• 6+ years of experience in data governance, data management, AI governance, security, or related operational leadership roles
• Experience governing unstructured or operational data (e.g., collaboration platforms, knowledge systems, document repositories)
• Strong understanding of data quality concepts and lifecycle management
• Familiarity with AI risk considerations including data provenance, bias, privacy, and misuse
• Demonstrated ability to drive cross‑functional execution without direct authority
• Excellent written and verbal communication skills for executive and technical audiences
• Sound judgment balancing governance rigor with business pragmatism
• High degree of ownership and follow‑through

What We’d Like to See (Not Required)

• Experience supporting AI governance, AI enablement, or responsible AI initiatives
• Exposure to regulated environments (HIPAA, HITRUST, SOC 2, GovRAMP, or similar)
• Familiarity with collaboration platforms such as Jira, Confluence, Slack, and Microsoft 365
• Experience partnering closely with Security, Legal, or Risk teams
• SaaS or data‑platform operating environment experience

What you’ll get in return 

• Competitive Leave & Benefits
• Comprehensive health coverage
• Equity for every employee – share in our success
• Growth-focused environment – your development matters here

Work arrangements 

• Standard hours: 8 hours/day, 5 days/week
• Location: Pune, Hybrid (3 days a week in office)
• Shift: 12pm-9pm IST

About the Position  

CISO is a critical role for Energy Exemplar to protect and safeguard organization’s digital assets, employee and customer data in today’s evolving threat landscape. The CISO will handle cybersecurity threats, respond to incidents, regulatory requirements, and technological advancements while contributing to EE’s overall strategic objectives and resilience. Cyber is one of the top operational risks for Energy Exemplar as we have had a rapid growth in our head count, and expanded our SaaS and Product offering organically and through acquisitions.  This role will ensure that Energy Exemplar will have the appropriate leadership with known skillsets, expertise, and experience to manage those risks across the organization  

Key Stakeholder Relationships  

This position works closely and collaboratively with all Energy Exemplar staff but in particular:  

• Product Engineering, DevOps, Information Technology Team  

• Legal, Finance, Sales and Global Leadership Team  

Key Accountabilities and Duties  

• Leadership and Strategy: Develop and implement a comprehensive information security strategy aligned with the company’s business objectives. Lead the Information Security team, providing guidance, mentorship, and support to ensure the team’s success.   

• Application Security: Oversee and enhance Energy Exemplar’s product security program, ensuring secure software development practices are integrated throughout the SDLC.   

• Certifications: Successfully lead Audit process for SOC2, ISO 27001 and similar certifications for regulatory boards for industry sectors that EE’s products are sold.  

• Incident Response / Management: Lead efforts in detecting, responding to, and recovering from security incidents, including having the technical aptitude to understand and own the incident (and all comms) and follow-up remediation and prioritization.  

• Risk Assessment: Continuously evaluate cybersecurity risks and enforce measures / controls to mitigate them.  

• Compliance: Ensure compliance with relevant security regulations and standards, and be able to present to regulators in case of an issue or any inquiries  

• Security Awareness: Promote a culture of security awareness and best practices among employees.  

• Manage Security Technologies: Oversee the adoption and management of effective security tools and practices.  

• Customer Engagement: Any of your most seasoned customer’s tech and cyber leadership on why cyber is managed exceptionally  

• Vendor / 3rd Party Risk Management: Assess and manage the security implications of third-party partnerships.  

• Budgeting: Manage and allocate resources efficiently to support the company’s security initiatives.  

• Executive Reporting: Communicate the status and needs of the security program to senior management and stakeholders, and be able to clearly articulate and define the trade-offs on specific cyber risks  

Candidate Requirements  

Skills, Knowledge and Experience:  

• A breadth of hands-on and senior leadership experience in security, engineering, or DevSecOps management.  

• In-depth understanding of security technologies such as intrusion detection, content filtering, threat patterns, security architecture, application architecture, and compliance criteria.  

• Thorough understanding of SDLC and Application Security Policies, Design and Documentation.  

• Experience with enforcing secure coding practices, threat modeling, identity and access management, and security incident response and recovery.   

• Deep knowledge of cloud security, network security, data protection, and security in a software development environment.   

• Thorough understanding of Risk Management principles (Risk Register and Cyber risks).  

• Fundamental understanding of Incident Management and Security and Cloud Operations.  

• Experience with ethical hacking, computer forensics, information assurance, and intrusion detection and prevention methodologies  

• Experience securing and navigating cloud platforms, such as Azure and AWS platforms.  

• Knowledge of security technologies (IDS, SIEM), cloud security monitoring technologies and the desire to remain technically hands-on, but also operate on a strategic level.  

• Deep knowledge of relevant security and compliance frameworks, standards, and regulations (such as SOC2, NIST, ISO270xx).   

• In-depth understanding of data protection laws and regulations, including GDPR and other relevant legislation in regional jurisdiction.   

• Deep expertise across security, privacy, audits, and legal security standards, guidelines, and principles within a large, highly distributed, complex global organization.   

• Able to effectively partner with cross-functional teams including Product Engineering, Cloud Operations, IT, Finance, Legal and HR to coordinate activities and accomplish goals.   

• Excellent communication skills, especially the ability to communicate security and risk-related concepts to technical and non-technical audiences.  

• Track record of building, growing, and maintaining high-performing security teams (US and India), driving transformation in a growth environment  

Qualifications:  

• Bachelor's Degree required in Computer Science, Engineering or technical field.   

• Minimum of 10+ years of experience in information security, with 5+ years in a leadership role.  

• Proven experience in application security, including secure coding practices, cloud operations, and vulnerability management.  

• In-depth knowledge of application security frameworks and best practices.  

• Proficiency with security tools such as static and dynamic analysis tools, vulnerability scanners, penn testing.  

• Hands-on experience with secure software development methodologies and DevSecOps practices.  

• Certifications (CISSP, CISA, CISM, CEH, OSCP or GSEC) preferred