IT Security Engineer
No salary listed
Mid
Hyderabad, Telangana, India
HybridHybrid work in Hyderabad.
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- Two to six years of experience in information security, IT audit, SOC governance, or security compliance.
- Hands-on exposure to SOC audit or compliance activities.
- Working knowledge of SOC 2 and ITGC concepts.
- Working knowledge of control testing and evidence collection.
Responsibilities
- Support SOC 2 Type I and Type II, future ISO 27001 readiness, and internal security audits related to SOC and IT operations.
- Map security and SOC controls to applicable frameworks, including the AICPA Trust Services Criteria and ITGCs.
- Coordinate and manage audit evidence collection from SOC, endpoint, identity, and infrastructure teams.
- Perform control design and operating effectiveness reviews for SOC-adjacent controls.
- Track audit findings, risks, and remediation actions through closure.
- Maintain continuous audit readiness rather than point-in-time compliance.
- Partner with IT and GRC to support vulnerability management oversight.
- Review and validate vulnerability findings from Nessus scans.
- Track remediation SLAs, compensating controls, and risk exceptions.
- Perform remediation validation testing after patching or configuration changes.
- Produce vulnerability compliance metrics and audit-ready reports.
- Support endpoint security control assurance across corporate devices using Microsoft Intune.
- Validate enforcement of device compliance policies, security baselines, and patch and configuration standards.
- Support audit evidence related to device enrollment, configuration compliance, and endpoint protection integration, including the Defender ecosystem.
- Partner with endpoint teams during audits to explain control design and operation.
- Support data protection and information governance controls using Microsoft Purview.
- Assist in audits related to data classification and labeling, DLP policy enforcement, retention and records management, insider risk, and audit logging.
- Validate evidence of operational effectiveness for Purview-based controls.
- Maintain compliance documentation related to data security and privacy controls.
- Maintain SOC-related policies, standards, procedures, and control narratives.
- Translate technical SOC and security processes into audit-ready documentation.
- Collaborate with SOC Operations, Endpoint and IAM teams, Internal Audit, and Risk and Compliance stakeholders.
- Prepare audit responses, management action plans, and status reporting.
Desired Qualifications
- Familiarity with ISO 27001.
- Familiarity with the NIST Cybersecurity Framework and NIST 800-53.
- Familiarity with the AICPA Trust Services Criteria.
- Experience working with or supporting Nessus for vulnerability scanning and remediation tracking.
- Experience working with or supporting Microsoft Intune for device compliance and endpoint security assurance.
- Experience working with or supporting Microsoft Purview for data loss prevention, data classification, and compliance tooling.
- Strong documentation, analytical, and stakeholder communication skills.
- CISA certification, ISO 27001 Foundation or Lead Auditor certification, CRISC certification, or Microsoft Security fundamentals certification is preferred but not mandatory.
About the company
Beghou Consulting offers sales force and marketing consulting services specifically for the pharmaceutical and health care industries. Its work centers on solving sales and marketing challenges by applying advanced analytics to help clients make better decisions. The company works with clients over the long term, delivering a growing set of analyses and services as their products and strategies evolve. Its differentiators include deep industry expertise, a track record with high-profile product launches, and a focus on providing data-driven insights and practical analyses that directly support sales force effectiveness and marketing management. Beghou’s goal is to help clients optimize their sales and marketing performance through rigorous analysis and actionable recommendations, aligning analytics with strategic product development and commercial execution.
Company Size
501-1,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Evanston, Illinois
Founded
1993
Get referred to Beghou Consulting
See people who can refer or advise you
Simplify's Take
What believers are saying
- Varsity Healthcare Partners remains an active backer after its 2023 strategic investment.
- Beghou's 2026 research targets 140 industry leaders and broadens top-of-funnel authority.
- AI-driven Arc and VP Pradeepta Mishra position Beghou for higher-margin technology work.
What critics are saying
- Balasiano v. Beghou Consulting entered Delaware bankruptcy court June 10, 2026.
- Accenture, ZS, and Real Chemistry outspend Beghou on AI and platform commercialization.
- If Arc adoption stalls, Beghou stays a services shop and misses durable software margins.
What makes Beghou Consulting unique
- Beghou Arc unifies 100-plus data sources into a commercialization command center.
- January 2026 research surveyed 120 biopharma leaders, reinforcing proprietary commercialization thought leadership.
- Meredith Ressi, Jenny Herritz, and Marcos Mendell deepen launch-to-scale commercialization expertise.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- 401(k) Company Match
- Phone/Internet Stipend
- Paid Vacation
- Paid Holidays
- Paid Parental Leave
- Tuition Reimbursement
- Wellness Program