Information Security Engineer

Security Scrum Master

Career Category

Information Systems

Job Description

Role Summary:

The Scrum Master is an agile coach responsible for enabling CDT/GRC teams to deliver high-quality outcomes through Agile execution, continuous improvement, and strong stakeholder engagement. The role ensures predictable delivery of cybersecurity risk, control, and compliance initiatives.

Key Responsibilities:

• Facilitate Scrum capability including sprint planning, daily stand-ups, sprint reviews, and ensure sprint goals are clearly defined and tracked Maintain sprint discipline and Agile best practices.
• Guide and coach teams on Agile principles, Scrum practices, and secure-by-design approaches.
• Collaborate with the Product Owner to prioritize and refine the backlogs, track delivery progress through Agile metrics, and ensure security and compliance requirements are incorporated into backlog items.
• Identify, track, and remove impediments, including those related to risk and control implementation and drive faster resolution of dependency-related issues.
• Support cross-functional coordination between engineering, security, and GRC teams, ensure adherence to Agile principles, security policies, and organizational governance standards.
• Ensure user stories include security acceptance criteria, track ISRA findings, audit issues, and control requirements in JIRA, and monitor closure of risk and compliance-related tasks.
• Maintain dashboards for sprint metrics, risk status, and control delivery while publishing regular updates on sprint outcomes, risks, control gaps, audit readiness, and evidence tracking.

Preferred Qualifications

• Bachelor’s degree in computer science and 2 to 6 years of experience in Information Systems or related field
• 3+ years of experience as a Scrum Master or Agile Coach in IT or Cybersecurity environments
• Certified Scrum Master (CSM), Professional Scrum Master (PSM), or equivalent certification
• Strong understanding of Agile frameworks (Scrum, Kanban, SAFe)
• Experience working within GRC, cybersecurity, or regulated environments
• Knowledge of ISRA/ISA processes, audit lifecycle, and control assurance practices
• Familiarity with ISO 27001, NIST CSF, COBIT, ServiceNow and ITIL frameworks
• Experience integrating compliance and security controls into Agile workflows
• Strong facilitation, coaching, and conflict resolution skills
• Proven ability to drive Agile maturity and continuous improvement
• Strong communication skills, including explaining technical concepts to non-technical stakeholders
• Ability to work in large/global corporate environments with distributed teams
• Familiarity with Jira, Azure DevOps, or similar tools
• Proficient in language for Business communication

*Shift: 2:00 PM – 11:00 PM IST

.

Experience Level

Senior Level