Senior Manager - BISO

The CoinDCX Journey: Building the Future of Finance

At CoinDCX, our mission is clear - to make crypto and blockchain accessible to every Indian and enable them to participate in the future of finance.

As India’s first crypto unicorn valued at $2.45B, we are reshaping the financial ecosystem by building safe, transparent, and scalable products that power adoption at scale.

We believe that change starts together. It begins with bold ideas, relentless execution and people who want to build what’s next.

If you’re driven by purpose and thrive in environments where your work defines the next chapter of an industry, you’ll feel right at home here.

About The Role

• Plays a critical role within the BISO organization by translating business security requirements into practical technical controls and engineering solutions.
• Supports the Director / AVP – BISO in securing business operations and strengthening overall security posture.
• Contributes to building and enhancing security capabilities across business functions.
• Ensures continuous risk identification, mitigation, and reduction across the organization.
• Acts as a hands-on security engineer with strong technical depth.
• Demonstrates effective stakeholder management and cross-functional collaboration skills.
• Brings a strong bias toward automation, scalability, and measurable security outcomes.
  
  

What You’ll Do

• Identify and implement security controls across business functions including identity & access management, endpoint security, secure configurations, and operational guardrails.
• Translate high-level security strategy from the Director – BISO into actionable engineering tasks and secure operational processes.
• Support secure-by-design initiatives within business units.
• Work with central InfoSec teams to build and integrate custom security tooling, automation pipelines, and monitoring systems tailored to business needs.
• Automate remediation workflows for common risks such as misconfigurations, stale access, or policy deviations.
• Contribute in implementing and adherence to changes management process, audit the process and build SOP’s aligned with the operations team.
• Continuously identify vulnerabilities, process gaps, and emerging risks impacting business processes or applications.
• Conduct technical assessments, risk reviews, and drive mitigation actions in collaboration with product and engineering teams.
• Track and close risks related to third-party tools, business applications, internal services, and infrastructure components.
• Act as the first technical point of contact during incidents affecting the business units.
• Collaborate with internal SOC teams on investigation, containment, and recovery activities.
• Prepare technical incident reports and support communication to business stakeholders.
• Support evidence preparation for audits, regulatory assessments, and internal risk reviews.
• Perform technical access reviews, configuration validation, and routine health checks to maintain policy adherence.
• Partner with engineering, cloud, IT, and operations teams to influence secure implementation decisions.
• Provide hands-on guidance to junior security engineers and help scale the BISO engineering capability.
  
  

You’ll Excel in This Role If You

Must have -

• 7+ years of experience in security engineering, application security, cloud security, or DevSecOps.
• Good understanding of security domains, processes, risks and controls
• Hands-on experience in at least one of: penetration testing, software engineering, security architecture, or secure product development.
• Good understanding of software engineering practices with ability to undertake security assessments and understand risk presented by vulnerabilities
• Good understanding of technical security infrastructure, controls, and architectures at scale
• Good understanding of information security controls and risk mitigation strategies.
• Support the business stakeholders with the execution and delivery of cross-functional security projects
• Govern risk remediation progress in close collaboration with business/department stakeholders.
• Familiarity with SOC2/ISO 27001/NIST controls.
• Strong understanding of threat modelling and risk assessment
• Any one or more of industry certifications such as CISA, CISSP, CISM, CCSP, AWS/GCP security etc
  
  

Hiring Process

• Here’s what your journey with us looks like:
• Application Review – We assess for skills, alignment, and intent
• Recruiter Connect – A short conversation to understand you better
• Functional Round(s) – Deep dive into your approach, craft, and problem-solving
• Assignment / Simulation Round – A take-home task or live problem-solving exercise to understand how you think and execute in real scenarios
• Culture & Values Discussion – A conversation to understand our ways of working and how you thrive best
• Founder Conversation (Optional) – For certain roles and senior levels, you may meet our founders to explore strategic alignment and long-term fit
  
  

Where We Work

We believe the best ideas emerge when people build together. Collaboration, speed and trust come alive when teams share the same space.

With this belief, we operate as a work-from-office organisation. This role is based out of our Bangalore office, where energy, alignment and innovation move in real time.

Perks That Empower You

• We believe great people deserve great experiences.
• Design Your Own Benefits: Flexible perks to match your lifestyle
• Unlimited Wellness Leaves: Rest and recharge as you need
• Mental Wellness Support: Access to therapy and wellness resources
• Learning Sessions: Bi-weekly learning and growth opportunities
  
  

Ready to Build What’s Next?

If you’re looking for a role that gives you direct access to high-stakes decisions, deep impact and a chance to build the future of finance, this is it.

Join CoinDCX and help us make crypto accessible to every Indian, together.

---