Build the future of banking.
About the Role:
Beyond managing technical controls, the ideal candidate must be an exceptional communicator capable of collaborating across diverse internal teams, managing security risk exceptions, and meticulously tracking open compliance and remediation items to closure.
Responsibilities:
Develop and maintain security baselines and configuration checklists for Windows/macOS endpoints, corporate networks, firewalls, Microsoft 365, email security, and Data Loss Prevention (DLP).
Work with respective technical teams to perform periodic security assessments, identify gaps, and track remediation.
Perform or support vulnerability assessments and penetration testing, including validation of findings and remediation.
Prepare and maintain security assessment reports, technical documentation, SOPs, and compliance evidence.
Support internal and external audits by coordinating with Audit, Compliance, and technical teams.
Track security findings, vulnerabilities, and audit observations to ensure closure within agreed timelines.
Communicate identified security gaps and recommended remediation actions to relevant stakeholders.
Skills:
Microsoft Security: Understanding of Microsoft 365 security, Intune, Microsoft Defender, and identity access controls.
Networking: Understanding of LAN, WLAN, WAN, firewalls, network security, and secure configurations.
Email Security: Understanding of email routing, SPF, DKIM, DMARC, and anti-phishing controls.
Operating Systems: Good understanding of Windows, Linux, and macOS security and hardening.
Scripting: Basic scripting knowledge in Python, PowerShell, or Bash/Shell for automation and log analysis.
Security Assessments: Understanding of vulnerability assessment, penetration testing, endpoint security, and Identity and Access Management (IAM).
Security Frameworks: Familiarity with CIS Benchmarks, NIST, PCI DSS, and SOC 1/SOC 2 requirements.
Documentation: Ability to prepare security checklists, assessment reports, SOPs, and audit evidence.
Experience and Qualifications:
3 to 5 years of experience in Information Security, Risk & Compliance, Endpoint Security, Network Security or Technical GRC role.
Bachelor of Technology (BE/B.Tech) in Computer Science or equivalent
Certifications (At least one of the following or equivalent is required):
Identity & Cloud Security: Microsoft Certified Associate (SC-200, SC-300, or SC-900).
Security Fundamentals: ISC² CC (Certified in Cybersecurity), CompTIA Security+ or CEH (Certified Ethical Hacker).
Network Security: CCNA (Cisco), Certified Security Associate (Cisco/Check Point), NSE 4 (Fortinet), or JNCIA (Juniper).
Skills Required
- 3+ years experience in Information Security, Risk & Compliance, Endpoint Security, Network Security, or Technical GRC
- Bachelor of Technology (BE/B.Tech) in Computer Science or equivalent
- At least one certification: Microsoft SC-200/SC-300/SC-900 OR ISC² CC, CompTIA Security+, CEH OR CCNA/Certified Security Associate/NSE4/JNCIA
- Hands-on experience with Microsoft Entra ID (Conditional Access, Identity Protection), Intune MDM/MAM, and Microsoft Defender for Endpoint
- Experience assessing and managing perimeter and infrastructure controls with Next‑Gen firewalls (Fortinet, SonicWall, Check Point, Cisco) and Aruba Wi‑Fi
- Experience with enterprise email security (Defender for M365), anti-phishing/anti-spam, and authentication standards (SPF, DKIM, DMARC)
- Ability to tune and monitor Endpoint and Network DLP policies and analyze data flows
- Hands-on cloud security governance for AWS or Azure, including CSPM, IAM auditing, and secure storage practices
- Proven ability to map technical configurations to compliance frameworks (ISO 27001, PCI‑DSS) and support internal/external audits
- Scripting and automation skills for log analysis and checks (Bash/Shell, Python)
- Practical knowledge of vulnerability assessment and penetration testing concepts, IAM, and endpoint security fundamentals
- Experience authoring SOPs and managing compliance evidence collection and action item tracking
- Basic understanding of AI tools and associated security/risk considerations
Zeta Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Zeta and has not been reviewed or approved by Zeta.
-
Fair & Transparent Compensation — Pay is considered competitive for some roles and markets, with market-aligned offers in certain senior or U.S.-based positions. Overall compensation tends to be seen as fine-to-good rather than top-tier.
-
Parental & Family Support — Parental leave, adoption/fertility support, and childcare coverage are part of the package. These offerings contribute to a well-rounded family support mix even if specifics vary by location.
-
Wellbeing & Lifestyle Benefits — Flexible hours, paid volunteer time, public-transport incentives, concierge services, and workplace perks are highlighted. These lifestyle-oriented perks add breadth beyond core pay and health coverage.
Zeta Insights
What We Do
Founded in 2015, Zeta is a provider of next-gen credit card processing platform. Zeta’s cloud-native and fully API-enabled stack offers a comprehensive range of capabilities, including processing, issuing, lending, core banking, fraud detection, and loyalty programs. With a strong focus on technology, Zeta has over 1700+ employees and contractors, with more than 70% dedicated to technology roles. Operating across the US, UK, Middle East, and Asia, Zeta has served a global customer base of 35+ clients who have issued over 15 million cards on Zeta's platform to date. Backed by prominent investors such as Softbank Vision Fund 2 and Mastercard, Zeta has raised $280 million, at a valuation of $1.5 billion.
