IT & Complaince Security

Company Description 5Exceptions Software Solutions Pvt Ltd is an offshore software development company specializing in building products, websites, and mobile applications across domains such as Finance, Healthcare, and E-commerce. Founded in 2015 by a team of experienced technologists, the company focuses on delivering simple, effective solutions to complex business problems. Its multidisciplinary team of project managers, software developers, and testers is committed to quality and timely delivery while enabling digital transformation for global clients. 5Exceptions has broad technical expertise in modern web and mobile technologies, QA automation, CRM platforms, cloud services, and emerging areas like blockchain, IoT, and chatbots. The company continues to grow its capabilities and welcomes professionals who want to work on diverse, cutting-edge projects.
Role Description
Role: IT & Compliance Engineer (4-6 years)
Employment Type: Full-time/ Permanent
Location: Indore (WFO)
About the Role
We're building out our security and compliance function, and this role owns the identity, IT, and compliance-evidence backbone the rest of the program runs on. You'll own how people and systems get access, how that access is reviewed and proven, and how we keep our SOC 2 program continuously audit-ready.
If you're the kind of engineer who makes access clean, least-privilege, and defensible — and can produce evidence an auditor trusts without hand-holding — this is your role.
Key Responsibilities
Own identity and access management (IAM) end to end, including user and service-account lifecycle (joiner, mover, leaver), least-privilege enforcement, MFA, key and credential hygiene, and access to cloud and SaaS systems.
Conduct periodic access reviews across cloud, SaaS, and internal systems, and produce audit-ready evidence demonstrating completion.
Own corporate IT, including endpoint management, SSO and identity-provider administration, and secure onboarding/offboarding processes.
Maintain SOC 2 compliance by managing control evidence, keeping the compliance automation platform current, and supporting internal and external audits.
Maintain the control ownership matrix, ensuring it stays accurate as the environment evolves.
Independently review third-party and vendor access, ensuring objective and compliant access governance.
Partner with Security and Engineering teams to remediate or document identity- and access-related findings per established processes.
Required Skills & Experience
Strong hands-on experience with IAM, including identity lifecycle management, least privilege, MFA, federation, SSO, and key/credential management.
Proven experience supporting or maintaining a SOC 2 Type II compliance program, including ownership of control evidence and audit participation.
Experience conducting access reviews and recertification cycles, with sound judgment on access approvals and revocations.
Hands-on experience managing corporate IT, including endpoints, SSO, and employee onboarding/offboarding.
Excellent written communication skills, with the ability to produce clear, audit-ready documentation.
Strong sense of integrity and objectivity when reviewing access permissions and compliance requirements.
Preferred Qualifications
~4 to 6 years of experience in Identity & Access Management, IT, Security Operations, or Compliance Engineering.
Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar.
Hands-on experience with identity providers such as Okta, Microsoft Entra ID, or AWS IAM Identity Center.
Familiarity with AWS IAM and cloud access management models.
AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
Relevant certifications such as CISA, ISC2 SSCP/CC, or CompTIA Security+.
Exposure to GDPR or other privacy and regulatory compliance frameworks.
Professional certifications (e.g., CCNA, CompTIA Security+, CEH, or similar) and familiarity with compliance frameworks, audit procedures, and documentation best practices are beneficial.
Strong attention to detail, ability to work collaboratively with cross-functional teams, and readiness to stay current with emerging security threats and technologies.

Work arrangement
No