Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 56 days ago

Specialist, Information Security and Privacy

Mindtickle19 open roles

Where
Pune, Maharashtra
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSpecialist, Information Security and PrivacyMindtickle · Pune, Maharashtra

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Mindtickle's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Mindtickle postings stay open a median of 62 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 56 days ago

Mindtickle median: 62 days open

The posting

Mindtickle is hiring a Specialist, Information Security and Privacy to join our Information Security and Privacy team in Pune. This role sits at the intersection of compliance, technical security, third-party risk management, and customer trust. You will be responsible for various functions related to the security, privacy, and protection of Mindtickle's growing cloud platform.

Your role will involve handling enterprise customer and prospect security RFP requests, managing third-party risk, and owning the operational backbone of our compliance program across SOC 2 Type II, ISO (27001, 22301, 27701, 27017, 27018 & 42001), 21 CFR Part 11, HIPAA, and DR testing. You will coordinate with customers, vendors, and internal teams to ensure Mindtickle adheres to the highest data security standards. A proactive and pragmatic approach to data security and privacy is essential as you help build systems that make compliance self-evident. This role reports to the Senior Manager, Information Security and Privacy.

Key Responsibilities

  • Serve as the main point of contact for sales and customer teams regarding security, privacy, and compliance topics, communicating with customers and prospects through RFPs, emails, or calls.
  • Review customer/prospect questionnaires and security addendums, providing and building necessary information, collaterals, and resources.
  • Maintain information security reports, RFP knowledgebase, and security assets for the security due diligence process utilizing existing RFP management tools.
  • Work flexibly across all teams in the organization, driving security RFP and third-party risk management projects, including sales, customer success, product, and engineering.
  • Own the third-party risk management process, including planning, scoping, needs analysis, ongoing project management, and communication with stakeholders.
  • Conduct security due diligence on new third parties and perform periodic risk reviews of existing third parties.
  • Own and manage controls across SOC 2 Type II, ISO standards, 21 CFR Part 11, and HIPAA frameworks, maintaining an up-to-date control landscape and evidence inventory.
  • Coordinate and support external audits end-to-end - from audit scoping and evidence preparation to auditor walkthroughs and post-audit remediation tracking.
  • Manage compliance tracking across Google Workspace (Sheets, Drive, Docs, Gmail) - maintaining structured control registers, evidence repositories, and policy documentation.
  • Send and track corrective action communications to control owners, following up through resolution and maintaining a clear audit trail.
  • Conduct periodic internal compliance reviews and produce structured reports for leadership.
  • Collaborate closely with privacy, internal governance, audit, Engineering, DevOps, Legal, and HR teams to gather necessary information related to compliance and ensure controls are implemented.
  • Work with engineering, business applications, legal, and other teams as required to fulfill customer, prospect, or third-party compliance requirements.
  • Maintain and periodically review information security policies, procedures, and standards in Google Docs, ensuring they remain current and aligned with framework controls.
  • Coordinate access reviews, vendor security assessments, and third-party risk evaluations as part of the ongoing compliance calendar.
  • Undertake any other reasonable and related tasks associated with the role.

Requirements

  • 3-5 years of experience in information security and compliance, with exposure to cloud software platforms (AWS/GCP).
  • Extensive experience in handling customer security queries, including RFPs, questionnaires, security architecture reviews, and data protection evaluations.
  • Experience in managing third-party risk evaluation and management processes.
  • Strong understanding of cloud governance and technology security controls covered in SOC 2, ISO Standards, NIST, GDPR, HIPAA, CSA STAR, CIS, etc.
  • Proficient in Google Workspace - comfortable using Sheets for control tracking, Drive and Docs for policy and evidence management, Gmail for formal communications, and Calendar for scheduling.
  • Utilize existing RFP management tools to maintain the knowledge base in line with changing customer needs, global standards, product releases, and updates.
  • Experience using Jira for cross-functional issue tracking and Slack for team collaboration.
  • Excellent communication, interpersonal, project management, and issue-resolution skills.
  • Strong written communication skills - able to draft clear policy documents, corrective action notices, and executive summaries.
  • Strong analytical and organizational skills, with the ability to work effectively as part of a team.
  • Proactive, pragmatic, and self-driven - able to learn quickly, take initiative, identify gaps, propose solutions, and drive complex projects in a fast-paced SaaS environment.

Good to have:

  • Certifications: CISSP, CISM, CISA, CRISC, CCSP, ISO 27001, ISO 42001, ISO 22301, CompTIA Security+, etc.
  • Understanding of data privacy principles under GDPR and HIPAA, including data classification, retention policies, and subject rights processes.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Mindtickle's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Mindtickle's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Mindtickle's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.