{"id":587504,"url":"https://alion.io/job/mindtickle-specialist-information-security-and-privacy","title":"Specialist, Information Security and Privacy","company":{"id":8575,"name":"Mindtickle","domain":"mindtickle.com","url":"https://alion.io/company/mindtickle","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":82,"open_postings":19,"ghost_share":0.211,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":105,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India","Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Gmail","optional":false},{"name":"Google Docs","optional":false},{"name":"Google Workspace","optional":false},{"name":"HIPAA","optional":false},{"name":"Jira","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"ISO 27001","optional":true},{"name":"ISO 42001","optional":true}],"status":"live","first_seen_at":"2026-09-10T05:43:20Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-11-05T23:50:43Z","board_verified":true,"closed_at":null,"days_open":56,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":55},"description":"Mindtickle is hiring a Specialist, Information Security and Privacy to join our Information Security and Privacy team in Pune. This role sits at the intersection of compliance, technical security, third-party risk management, and customer trust. You will be responsible for various functions related to the security, privacy, and protection of Mindtickle's growing cloud platform.\nYour role will involve handling enterprise customer and prospect security RFP requests, managing third-party risk, and owning the operational backbone of our compliance program across SOC 2 Type II, ISO (27001, 22301, 27701, 27017, 27018 & 42001), 21 CFR Part 11, HIPAA, and DR testing. You will coordinate with customers, vendors, and internal teams to ensure Mindtickle adheres to the highest data security standards. A proactive and pragmatic approach to data security and privacy is essential as you help build systems that make compliance self-evident. This role reports to the Senior Manager, Information Security and Privacy.\nKey Responsibilities\nServe as the main point of contact for sales and customer teams regarding security, privacy, and compliance topics, communicating with customers and prospects through RFPs, emails, or calls.\n\nReview customer/prospect questionnaires and security addendums, providing and building necessary information, collaterals, and resources.\n\nMaintain information security reports, RFP knowledgebase, and security assets for the security due diligence process utilizing existing RFP management tools.\n\nWork flexibly across all teams in the organization, driving security RFP and third-party risk management projects, including sales, customer success, product, and engineering.\n\nOwn the third-party risk management process, including planning, scoping, needs analysis, ongoing project management, and communication with stakeholders.\n\nConduct security due diligence on new third parties and perform periodic risk reviews of existing third parties.\n\nOwn and manage controls across SOC 2 Type II, ISO standards, 21 CFR Part 11, and HIPAA frameworks, maintaining an up-to-date control landscape and evidence inventory.\n\nCoordinate and support external audits end-to-end - from audit scoping and evidence preparation to auditor walkthroughs and post-audit remediation tracking.\n\nManage compliance tracking across Google Workspace (Sheets, Drive, Docs, Gmail) - maintaining structured control registers, evidence repositories, and policy documentation.\n\nSend and track corrective action communications to control owners, following up through resolution and maintaining a clear audit trail.\n\nConduct periodic internal compliance reviews and produce structured reports for leadership.\n\nCollaborate closely with privacy, internal governance, audit, Engineering, DevOps, Legal, and HR teams to gather necessary information related to compliance and ensure controls are implemented.\n\nWork with engineering, business applications, legal, and other teams as required to fulfill customer, prospect, or third-party compliance requirements.\n\nMaintain and periodically review information security policies, procedures, and standards in Google Docs, ensuring they remain current and aligned with framework controls.\n\nCoordinate access reviews, vendor security assessments, and third-party risk evaluations as part of the ongoing compliance calendar.\n\nUndertake any other reasonable and related tasks associated with the role.\n\nRequirements\nExperience and Background\n3-5 years of experience in information security and compliance, with exposure to cloud software platforms (AWS/GCP).\n\nExtensive experience in handling customer security queries, including RFPs, questionnaires, security architecture reviews, and data protection evaluations.\n\nExperience in managing third-party risk evaluation and management processes.\n\nStrong understanding of cloud governance and technology security controls covered in SOC 2, ISO Standards, NIST, GDPR, HIPAA, CSA STAR, CIS, etc.\n\nTooling and Workflow\nProficient in Google Workspace - comfortable using Sheets for control tracking, Drive and Docs for policy and evidence management, Gmail for formal communications, and Calendar for scheduling.\n\nUtilize existing RFP management tools to maintain the knowledge base in line with changing customer needs, global standards, product releases, and updates.\n\nExperience using Jira for cross-functional issue tracking and Slack for team collaboration.\n\nSoft Skills and Working Style\nExcellent communication, interpersonal, project management, and issue-resolution skills.\n\nStrong written communication skills - able to draft clear policy documents, corrective action notices, and executive summaries.\n\nStrong analytical and organizational skills, with the ability to work effectively as part of a team.\n\nProactive, pragmatic, and self-driven - able to learn quickly, take initiative, identify gaps, propose solutions, and drive complex projects in a fast-paced SaaS environment.\n\nGood to have:\nCertifications: CISSP, CISM, CISA, CRISC, CCSP, ISO 27001, ISO 42001, ISO 22301, CompTIA Security+, etc.\n\nUnderstanding of data privacy principles under GDPR and HIPAA, including data classification, retention policies, and subject rights processes.","description_format":"text","description_chars":5227,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Sales Enablement","Corporate Training"],"lifecycle":[{"event":"open","at":"2026-09-10T07:16:27Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.852,"p_room":0.9,"age_days":56,"expected_fill_days":105,"reasons":["conf:2","win:mid"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/mindtickle-specialist-information-security-and-privacy","json_url":"https://alion.io/job/mindtickle-specialist-information-security-and-privacy.json","meta":{"generated_at":"2026-11-06T03:52:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6547,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8575},"rest":"https://alion.io/mcp/rest/get_company?id=8575"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmindtickle-specialist-information-security-and-privacy"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmindtickle-specialist-information-security-and-privacy"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmindtickle-specialist-information-security-and-privacy"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mindtickle-specialist-information-security-and-privacy\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmindtickle-specialist-information-security-and-privacy"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":587504}},{"tool":"search_jobs","arguments":{"company":"mindtickle.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":587504},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}