Senior Information Security Officer

Experience: 4.00+ years(Note: This is a requirement for DoubleTick.io, an official Meta Partner in the WhatsApp Business ecosystem.)

About DoubleTick

At DoubleTick, we're building the #1 WhatsApp-first Conversational CRM & CX platform. As an official Meta Business Partner, we enable enterprises to manage WhatsApp deployments, AI-driven governance, analytics, automation, and integrations with CRMs like Salesforce & Zohoscaling trust, compliance, and customer engagement on the world's most used messaging platform.We work with leading enterprises in BFSI, Real Estate, Travel, Automobile, Pharma, and Consumer Brands, helping them drive ROI on their WhatsApp marketing, customer service, and sales pipelines.Security is at the heart of our platform. With millions of conversations and sensitive customer data flowing through DoubleTick daily, robust InfoSec practices are non-negotiable.What we're looking forWe are seeking a Senior Information Security Engineer who will be the custodian of our compliance and security posture. You will own ISO 27001 and SOC 2 frameworks, run audits, manage risk assessments, and work closely with product, engineering, and enterprise clients to ensure DoubleTick is secure by design.If you're someone who thrives on audits, ISMS frameworks, cloud security, and customer trust-building, this role is for you.Must-have skills

• Deep expertise in ISO 27001, SOC 2, and ISMS (46 years)
• Strong exposure to AWS, Google Cloud, and Azure (public cloud security best practices)
• Experience leading end-to-end compliance audits (internal & external)
• Hands-on experience with ISMS lifecycle management
• Ability to respond to customer third-party risk assessments and security RFPs
• Skilled at writing & maintaining InfoSec policies and procedures
• Excellent communication skills to bridge the gap between security & business stakeholders
• Experience in a SaaS environment (B2B preferred)
• Certifications (mandatory): ISO 27001 Lead Auditor, CISA, CISSP
  

What your day would look like

• Maintain and manage DoubleTick's ISMS framework (ISO 27001 & SOC 2)
• Lead and coordinate internal and external compliance audits
• Manage policy renewals, updates, and documentation
• Face customer/vendor security assessments and respond to questionnaires
• Collaborate with engineering teams to close compliance gaps
• Conduct risk assessments and ensure appropriate controls are in place
• Build security awareness and training programs for employees
• Monitor and improve security KPIs and compliance dashboards
• Stay ahead of regulatory requirements and industry frameworks
  
  
  

Why work with DoubleTick

• Work at the intersection of SaaS, AI, and Conversational CX
• Build and scale security systems for enterprise-grade SaaS
• Exposure to global enterprise clients in BFSI, Real Estate, Travel, and more
• Direct impact: your work will influence trust, compliance, and governance across industries
• A startup culture with enterprise-grade challengeswhere you can own, experiment, and grow
• A vibrant work environment (yes, we debate checklists over chai too ?)