Senior Engineer - Security Risk & Compliance
First seen by Alion on Nov 7, 2026.
Position Summary :
The Information Security Risk and Compliance lead is responsible for proposing, assessing and implementing various cybersecurity services and solutions to clients. This includes crafting compelling proposals, showcasing value proposition to clients. Leading and completing various cybersecurity services opted by the client including assessment and implementation.
Key Responsibilities :
- Lead independently in implementing end to end compliance standards such as ISO 27001, NIST, ECC-2024, SOC1, SOC2 etc.
- Lead in assessing cybersecurity posture and maturity for client based on requirements and pain areas. Recommending cybersecurity strategy and architecture based on client's pain areas and risk assessments.
- Lead in performing information security risk assessment, tracking and monitoring the risk remediation.
- Collaborate with internal department of client in addressing and remediating various identified information security risk.
- Collaborate with the sales team to craft compelling proposals and demonstrations that showcase the value proposition of Mindsprint's security solutions.
- Present complex cybersecurity solutions to clients in a clear, concise, and engaging manner, translating technical jargon into understandable benefits.
- Design and propose customized security solutions that address the client's unique challenge.
- Lead in performing infrastructure and network security assessment including firewall reviews and vulnerability assessment across servers and devices.
- Define and document security metrics and dashboard to measure and monitor cybersecurity KRI and KPIs.
- Consult with potential clients to assess their cybersecurity posture, identify vulnerabilities, and uncover their specific pain points.
- Develop, Implement, and maintain certification/attestation standards (e.g., SOC1, SOC2, ISO 27001) standards.
- Review and update current information security policies and procedures.
- Create and oversee the implementation of new security and compliance policies and procedures.
Requirements :
- Strong expertise in cybersecurity principles and best practices.
- Thorough understanding of various security standards, framework, and certifications/attestations e.g., SOC1, SOC2, ISO 27001, NIST etc.
- Thorough understanding of various IT and Information security risk assessment framework/standards.
- In-depth knowledge of various security tools and technologies.
- In-depth understanding of various firewall and vulnerability assessment solutions.
- Top-notch communication skills, both written and verbal, to deliver presentations and consult with diverse client.
- Excellent analytical and problem-solving skills.
- Ability to develop security standards and guidelines based on best practices and industry standards for existing and new technologies.
- Security certifications (e.g., CISSP, CISA).
- Stay up to date on the latest cyber threats and vulnerabilities.
- Familiarity with common tech stacks.
- Understanding of various virtualization tools like PowerBI, Tableau and tool like PowerShell, Python would be added advantage.
- Engineering in Computer Science, or relevant field.
About Mindsprint :
Mindsprint exists to responsibly engineer the next generation of enterprises - driven by insight, innovation, and passion. With a proven track record spanning two decades, we are the partner of choice for high-impact, AI-driven technology solutions for clients across the globe in industries such as retail, agriculture, manufacturing, healthcare, and life sciences, among others.
Our offerings include enterprise technology applications, business process services, cybersecurity solutions, and automation-as-a-service - delivered with a strong commitment to responsible innovation. Headquartered in Singapore, Mindsprint has a global workforce of 3,200+ professionals across the US, UK, Middle East, India, Australia, and Africa.
Awards & Recognition :
- We are Great Place To Work Certified for 2024-25.
- Best Firm for Data Scientists 2025 by AIM.
- Named Enterprise Innovator in HFS Horizons : Intelligent Supply Chain Services as well as Lifesciences reports of 2025.
- Best MSP Partner 2025 & Outstanding Innovation Partner 2024.
- Most Valuable Partner Award 2024 & Customer Impact Award 2025 by KYP.ai.
- Excellence in Business Process Services 2024.
- Top Global CISO at CyberDefenseCon 2024.
- Technology Senate Award 2024 for Enterprise Apps.
- SSON Asia Impact Awards 2023.
- Data Analytics Award at AI & Analytics Summit.
- Outstanding Agri-tech solution provider 2023.
- Best use of Data Analytics by Middle East Enterprise AI & Analytics Summit 2023.
Skills
Information Security, NIST, CISSP, CISA, IT Risk, IT Compliance, IT Audit, Vulnerability Assessment, SOC II, Security, ISO