About Zinnov Zinnov is a global management consulting firm that helps organizations make decisions that actually get used — and deliver results that matter. For over two decades, we’ve partnered with leading enterprises, high-growth technology companies, and investors to answer some of the toughest questions they face: Where should we invest? How do we scale globally? What capabilities will win in the next decade? Our work shapes market entry strategies, global operating models, M&A decisions, and long-term growth bets. We’re known for being data-led, execution-focused, and outcome-driven — not opinion-heavy slideware. At Zinnov, how you work matters as much as what you deliver. We value independent thinking, crisp communication, and early ownership. With 450+ professionals across 10 global offices, we work across industries including Digital Services, ER&D, Enterprise Software, Semiconductors, Healthcare, BFSI, Automotive, Media & Telecom, and Private Equity. Zinnov isn’t for everyone. It’s for people who want steep learning curves, honest feedback, and the chance to see their work influence real business decisions — not just presentations. Why Corporate Functions? Zinnov’s Corporate Functions teams power how the firm delivers at scale—building the internal engine behind high-growth, high-impact work. You’ll get: Hands-on ownership in running and scaling core operations (including Legal, Compliance, Risk, and Governance). Exposure to end-to-end enablement models that strengthen operating engines, employee experience, and scalable processes. A highly cross-functional environment with close collaboration across delivery/PMO and domain teams to drive consistent execution. About the Role At Zinnov, knowledge is not documentation. It is strategic capital. As an Associate – Knowledge Management , you will help architect, govern, and scale an AI-enabled knowledge ecosystem that powers mar
Salary not disclosed
Check market pay for comparable Corporate Risk and Compliance roles before applying.
Role overview
Job description
- Endpoint & Identity Security: Assess and regulate/optimize Microsoft Entra ID (Conditional Access, Identity Protection) and Intune MDM/MAM to manage configuration and compliance profiles for both Windows and macOS environments. Investigate security timelines using Microsoft Defender for Endpoint.
- Network Security: Assess, monitor, regulate and audit perimeter and infrastructure security controls across a multi-vendor environment, including Next-Gen Firewalls (Fortinet/SonicWall/Check Point/Cisco) and enterprise wireless architectures (Aruba Wi-Fi).
- Email Security & Gateway Security: Assess, monitor, regulate and audit enterprise email security gateways and protection suites (e.g., Defender for MS365,). Manage anti-phishing, anti-spam, and safe attachments policies, and maintain foundational authentication protocols including SPF, DKIM, and DMARC.
- Data Protection & DLP: Tune and monitor Endpoint and Network Data Loss Prevention (DLP) policies, analyzing data flows to prevent unauthorized exposure of proprietary or regulated data.
- Cloud Security Governance: Govern and enforce security best practices across AWS and Azure. Monitor security posture (CSPM), audit IAM configurations, and secure cloud storage.
- GRC Alignment & Audit Support: Map everyday technical configurations to ISO 27001 and PCI-DSS controls. Systematically gather and organize log/configuration evidence for internal and external auditors.
- R&C Business Support: Act as the Risk & Compliance guardian for the business; review, evaluate, and respond to incoming IT tickets, change requests, and end-user security queries to ensure no unauthorized risks are introduced.
- Cross-Functional Collaboration: Act as the security bridge to Helpdesk, Infrastructure, DevOps, and Business teams. Translate technical risks into clear, actionable business language to drive fixes.
- Action Item Tracking: Meticulously track open vulnerabilities, audit gaps, and risk exceptions. Own the follow-up lifecycle to ensure internal teams resolve items within agreed SLAs.
-
Microsoft Stack: Strong understanding of M365 product/security suites, Intune deployments, and hybrid identity environments.
-
Networking & Perimeter Security: Strong understanding of networking technologies, network security, enterprise firewalls, and secure perimeter controls.
-
Email Protocols & Infrastructure: Strong working knowledge of email security infrastructure, mail routing, and authentication standards (SPF, DKIM, DMARC).
-
Multi-OS Mastery: Solid understanding of different operating systems, including enterprise management of Windows, Linux, and macOS environments.
-
Automation & Scripting: Strong understanding of developing and reviewing technical scripts using common languages (e.g., Bash/Shell, Python) to analyze logs or automate checks.
-
Compliance Automation: Experience automating and templating security processes, metrics, and documentation for strict compliance purposes.
-
Cloud Infrastructure: Solid understanding of public cloud technologies with hands-on technical knowledge of at least one major public cloud platform (AWS or Azure).
-
Security Fundamentals: Comprehensive understanding and hands-on for Vulnerability Assessments, Penetration Testing concepts, Identity & Access Management (IAM), and Endpoint Security.
-
Frameworks & Process: Practical understanding of IT security frameworks, controls, and auditing processes—including CIS, NIST, PCI-DSS, and SOC 1/2.
-
Documentation & Audit Support: Ability to author clear Standard Operating Procedures (SOPs) and systematically manage compliance evidence collection.
-
Emerging Tech & AI: Basic understanding of AI tools and technologies, including their safe implementation and associated risk factors.
Bachelor of Technology (BE/B.Tech) in Computer Science or equivalent.
Certifications (At least one of the following or equivalent is required):
About this listing
- Listed from Zeta's careers site via Lever · last confirmed on the source 19 Oct 2026
- Posted 1 Jul 2026
Jobiba does not charge job seekers. Never pay to apply or share OTPs, card or bank details.
What they are looking for
Skills & requirements
Qualification
Experience and Qualifications: 3+ years of experience in Information Security, Risk & Compliance, Endpoint Security, Network Security or Technical GRC role; Bachelor of Technology (BE/ B.Tech ) in Computer Science or equivalent
Department · Risk & Compliance
Hiring company
Zeta
Build modern banking and payment products and experiences with our one-stack modular, API-ready, cloud-native platform.
Related opportunities
Similar active roles
Relevant, currently active roles for this market.
🔔 Get job alerts
New Corporate Risk and Compliance - Associate II jobs in Bengaluru, KA, India, straight to your inbox.
No spam · Unsubscribe anytime