Information Security Lead

About us:
Yanolja Cloud Solution Pvt. Ltd. (YCS), is a global end-to-end hospitality technology provider specializing in innovative technology solutions for small and medium-sized accommodation businesses.
With 17+ years of experience and 400+ team members, YCS currently serves 33,000+ customers across 170+ countries. Our hospitality technology solutions support 50+ languages, backed by a 24/7 global support network.
YCS has local teams across 9+ countries, including India, Thailand, Indonesia, the Philippines, Sri Lanka, South Africa, Tanzania, Uganda and the USA, with our global presence continuing to expand.
About the Role:
Yanolja Cloud Solution Pvt. Ltd. is looking for an experienced Information Security Lead to lead and strengthen our security posture across SaaS products, applications, APIs, AWS/cloud infrastructure, internal systems and customer data.
This is a hands-on technical leadership role requiring strong expertise in Application Security, API Security, AWS Security, Incident Response, Vulnerability Management, Security Architecture and DevSecOps.
Key Responsibilities:
Lead Application, API and SaaS security initiatives.
Own AWS and cloud security reviews, including IAM, access controls, network security, S3, encryption and secrets management.
Lead security incident investigation, containment and remediation.
Own vulnerability management and drive critical/high-risk issues to closure.
Establish and strengthen Secure SDLC and DevSecOps practices.
Conduct security architecture and threat-modeling reviews.
Review authentication, authorization, RBAC and multi-tenant security.
Work closely with Engineering, DevOps, Infrastructure, QA and Product teams.
Review penetration-testing findings and ensure effective remediation.
Establish security standards, controls, procedures and security roadmap.
Support security governance and compliance requirements including ISO 27001, SOC 2 and PCI DSS, where applicable.
Required Skills & Experience:
10+ years of professional experience in Cybersecurity / Information Security.
Strong hands-on experience in:
Application Security
API Security
AWS / Cloud Security
Incident Response
Vulnerability Management
Security Architecture
DevSecOps
Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
Experience securing SaaS / multi-tenant applications.
Strong understanding of IAM, RBAC, authentication, authorization and least privilege.
Experience with SIEM, EDR, WAF, vulnerability management and application security tools.
Experience working closely with Engineering and DevOps teams.
Strong analytical, investigative and problem-solving skills.
Preferred Certifications
CISSP, CISM, OSCP, CCSP, AWS Certified Security – Specialty, GIAC, CEH or ISO 27001 certifications will be an added advantage.
Practical hands-on experience is more important than certifications.
Education
Bachelor's/Master's degree in Computer Science, IT, Cybersecurity, Information Security, Engineering or equivalent professional experience.

Work arrangement
No