Information Security Compliance & Audits
About the job
- Two to four years of experience in compliance, information technology audit, or risk management.
- Strong technical understanding of modern security technologies and practices, including cloud security, cloud security posture management, endpoint detection and response, cloud access security broker, data loss prevention, Zero Trust, secure access service edge, application security, secure software development lifecycle, static application security testing, dynamic application security testing, software composition analysis, and application programming interface security, with the ability to independently audit these controls.
- Hands-on experience managing ISO 27001, ISO 27701, ISO 42001, Payment Card Industry Data Security Standard, or equivalent certification programs end-to-end, including at least two to three external audit or certification cycles.
- Strong working knowledge of Indian regulatory requirements, including the Digital Personal Data Protection Act 2023, CERT-In Directions 2022, Information Technology Act 2000, and relevant sector-specific regulations such as RBI PA/PG and NPCI requirements.
- Demonstrated experience managing third-party and vendor risk programs, including contractual security requirements and vendor assessments.
- Excellent stakeholder management and communication skills, with the ability to present to senior leadership, negotiate with auditors, and influence without direct authority.
- Practical familiarity with artificial intelligence tools and techniques applied to compliance workflows, including automated evidence collection, control testing, audit analytics, and risk-pattern detection, together with sound judgment regarding human accountability.
- Act as the primary governance, risk, and compliance point of contact for senior leadership and translate complex audit and risk findings into clear, decision-ready executive summaries.
- Build cross-functional trust to drive compliant growth, manage pushback diplomatically, and negotiate realistic remediation timelines without sacrificing the risk posture.
- Align Engineering, Human Resources, and Legal teams so that every security policy and control has a dedicated, accountable owner.
- Own end-to-end third-party and vendor risk management, including security questionnaires, risk assessments, and continuous monitoring for critical vendors.
- Partner with Legal and Procurement to embed data protection clauses, breach-notification service-level agreements, and right-to-audit terms in master service agreements and statements of work.
- Maintain the central vendor risk register, track reassessment cycles, and drive offboarding or remediation for high-risk or non-compliant vendors.
- Own the audit calendar and readiness across ISO 27001, ISO 22301, ISO 42001, Payment Card Industry Data Security Standard, Digital Personal Data Protection Act 2023, and CERT-In Directions 2022.
- Maintain current evidence repositories and lead audit field logistics, interview scheduling, and sample pulls.
- Track audit findings to closure, formally flag overdue risks to leadership, and document signoffs when extensions are required.
- Serve as the main bridge for external certification bodies and negotiate audit scope, sampling, and timelines to keep audits proportionate and evidence-based.
- Manage internal and outsourced audit panels, ensuring quality workpapers, professional dispute resolution, and auditor independence.
- Continuously mature an ISO 31000-aligned enterprise risk register and maintain the central policy framework.
- Drive automation for evidence collection to minimize manual effort and enable real-time visibility into the organization’s compliance posture.
- Relevant certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, ISO 27001 Lead Auditor or Lead Implementer, Certified Information Systems Security Professional, Security+, or equivalent.
About the company
Swiggy is a food delivery platform in India that connects customers with local restaurants. It uses a network of pick-up and delivery partners to route orders, handle payments, and provide real-time tracking. Revenue comes from commissions on orders, a subscription service (Swiggy Super), and advertising with restaurants; it differentiates itself by focusing on customer experience and fast delivery through tech and logistics. Its goal is to provide convenient, fast food delivery across major Indian cities while expanding its delivery network and services in a competitive market.
Company Size
10,001+
Company Stage
IPO
Headquarters
Bengaluru, India
Founded
2014
Get referred to Swiggy
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q1 FY27 revenue rose 37% to ₹6,812 crore; losses narrowed 34% to ₹791 crore.
- Instamart reached contribution breakeven in Q1 FY27, strengthening quick-commerce economics.
- SBI Mutual Fund bought ₹300 crore of Swiggy shares on September 29, 2026.
What critics are saying
- FSSAI opened punitive action on September 23, 2026 against Swiggy Instamart for Datura listings.
- TG SAFE suspended two Swiggy Instamart Hyderabad dark-store licences on September 30, 2026.
- Repeated compliance failures trigger shutdowns, seller distrust, and an Instamart trust collapse.
What makes Swiggy unique
- Swiggy runs food delivery and Instamart quick commerce across 720-plus cities.
- Its 6.5 lakh delivery-partner network gives dense last-mile coverage.
- Early Cashout and the partner app deepen worker stickiness and execution reliability.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Hybrid Work Options
Growth & Insights and Company News
6 month growth
0%1 year growth
0%2 year growth
2%Swiggy, Zomato have A new fight on their hands. Swiggy and Zomato's grip on food delivery is facing fresh competition from Ownly, Swish Go and Flipkart. But can these new entrants loosen the duopoly's hold? For years, Swiggy and Zomato have ruled the Indian foodtech sector with an iron fist, building vast restaurant networks and loyal customer bases that have made it difficult for new players to compete. But the duopoly is now facing fresh competition from three directions: Rapido's Ownly, food delivery startup Swish's new marketplace, Swish Go, and ecommerce giant Flipkart. Ownly is already handling around 50,000 orders a day in Bengaluru and entered Hyderabad just two weeks ago. Swish, which started with quick food delivery, is expanding into restaurant aggregation with its new marketplace, Swish Go. Ecommerce giant Flipkart, too, is testing its food delivery service, Eat In, in Bengaluru.
Swiggy Instamart dark store faces scrutiny over expired food. October 8, 2026 After rider complaints, food safety officials found 14 expired items during an inspection at a Swiggy Instamart dark store in Hyderabad. The riders say expired food was going out to customers from the store. They want action against its management. According to the reports, the items turned up during an inspection and included milk products, paneer and sauces. A dark store is a small warehouse that quick-commerce apps use to pack and dispatch orders. Shoppers cannot walk in and buy things there. Quick commerce simply means groceries and daily items reach you within minutes, packed from these local hubs. Milk and paneer spoil fast, so staff need to check expiry dates often. The findings have raised questions about how the store tracks its stock and removes old products before packing orders. Plenty is still unclear. The reports do not say how many expired items, if any, reached customers. They also give no details on penalties or further action, and they carry no response from Swiggy's management. No official statement confirming the inspection appears in the sources reviewed, so the findings remain reported rather than confirmed. Hyderabad is not the first trouble spot. Four quick-commerce FSSAI licenses, including two Swiggy Instamart sites in the city, were stopped on September 30 by Telangana's food safety regulator, TG SAFE, according to sources. An FSSAI licence is the permit a food business needs to operate. The same report says Telangana officials inspected 16 quick-commerce dark stores in Hyderabad, which led to those four suspensions. It also says the Maharashtra FDA suspended licences of several dark stores in August, and that FSSAI sent Swiggy Instamart nine notices in July over quality and contamination complaints. None of the sources carries a Swiggy response to the Hyderabad allegations. Until officials or the company say more, the full picture stays incomplete. Ready to invest like a pro? Tradz by EquityPandit app equips you with 100+ Free tools and knowledge you need to succeed. Download the Tradz by EquityPandit app and gain access to daily stock lists and insightful market analysis and much more! Explore On Popular Screeners
Expired food, cobwebs, cockroaches found at Swiggy Instamart, Flipkart, Zepto dark stores in Hyderabad. The findings have raised concerns about food safety standards in the dark-store network that powers Hyderabad's rapid grocery delivery business. Read Time: 2 mins During the inspections, officials found a range of violations. The Telangana food safety team inspected 16 quick-commerce dark stores linked to Swiggy Instamart, Flipkart and Zepto, and immediately suspended the licences of four after finding expired food, pest infestation, fungal contamination and poor storage conditions. The findings have raised concerns about food safety standards in the dark-store network that powers the city's rapid grocery delivery business. Ten enforcement teams comprising food safety officers and police personnel inspected 16 dark stores operated by Swiggy Instamart, Flipkart, Zepto and Dropx Logistics across Hyderabad's Core Urban Region. During the inspections, officials found a range of violations, including expired and damaged food products, spoiled vegetables, dusty and rusted storage racks, cobwebs, improper storage practices, cockroach and pest infestations, labelling violations, and inadequate cold-room temperature maintenance. Authorities also collected 15 food samples suspected of adulteration. The samples will be tested as part of the ongoing investigation. The four outlets whose FSSAI licences were suspended are: * Swiggy Instamart store at Pet Basheerabad * Swiggy Instamart store at Saidabad * Flipkart Instakart store at Panjeshah Road, Charminar * Zepto store at Ram Koti Officials directed all four outlets to cease operations immediately in the interest of public health. In addition, five outlets have been issued show-cause notices, while three others have received improvement notices. The establishments will be subject to re-inspection and could face further regulatory action, including penalties, depending on compliance and the outcome of the investigation. The findings have put the spotlight on food safety practices inside dark stores, which serve as fulfilment centres for the rapid delivery of groceries and other consumer products to customers' homes. As quick-commerce platforms continue to expand, regulators are likely to maintain closer scrutiny of storage, hygiene and inventory-management practices to ensure consumer safety. How may i help you today Follow us:
SBI Mutual Fund has increased its stake in Swiggy to over 5% after acquiring 1.18 crore additional shares worth approximately ₹300 crore on 29 September. The purchase was made at Swiggy's closing price of ₹253.70 per share. Following the transaction, SBI Mutual Fund's holding rose from 4.70% to 5.12%, totalling 14.15 crore shares. The increase triggered mandatory disclosure requirements under SEBI regulations as the stake crossed the 5% threshold. The investment comes after Swiggy shareholders approved a 49.5% cap on foreign ownership in August. The food delivery and quick commerce company reported operating revenue of ₹6,812 crore in Q1 FY27, up 7% year-on-year, whilst narrowing losses by 34% to ₹791 crore.
Swiggy Instamart names Kejal Parekh as AVP, brand marketing. Parekh joins from Myntra, where she spent over five years across brand marketing, sales events and newer business categories. 0:00 / 1:04 Swiggy has appointed Kejal Parekh as assistant vice-president, brand marketing, for its quick-commerce platform Instamart. Parekh joins Swiggy Instamart after more than five years at Myntra, where she most recently served as director. She had earlier held the roles of associate marketing director and deputy marketing director. At Myntra, Parekh worked across brand campaigns, major sales events and marketing for newer categories, including beauty and personal care. Her responsibilities also included brand marketing, private brands and licensing, with projects involving brands such as Mango, Roadster, Next and Bershka. Prior to Myntra, Parekh spent more than three years at Nykaa. She joined the company as marketing manager in April 2018 and was promoted to senior marketing manager in July 2019. Her role involved brand communication and developing and executing creative campaigns. Earlier in her career, Parekh was associate marketing director at MyGlamm, where she worked on brand campaigns, agency and franchise partnerships, influencer initiatives and customer acquisition for stores. She has also held roles at Konnect Marketing and Jean Claude Biguine.