Information Security Associate

Role Name: Information Security AssociateAt Kapture CX, we are looking for a Information Security Associate in our InfoSec operations team. Who are we? Kapture CX is a leading SaaS platform that helps enterprises automate and elevate customer experience through intelligent, AI-powered solutions. We partner with enterprises across industries to bring scalable automation and insight-driven efficiencies to their CX operations. Over a thousand clients across 18 countries have used Kapture's products to enhance their customer experience, including Unilever, Reliance, Coca-Cola, Bigbasket, Meesho, Airtel Payments Bank and Cathay Pacific. Kapture delivers industry-specific solutions powered by AI, tailored workflows, and seamless automation. Kapture CX is headquartered in Bangalore and we have offices in Mumbai and Delhi/NCR in India, in addition to offices in the USA, UAE, Singapore, Philippines and Indonesia. We are looking for an Information Security Associate to support Kapture's day-to-day InfoSec operations, compliance, and audit activities. This role works closely with the CISO and cross-functional teams (Tech, Product, Operations, Legal) to maintain and strengthen our security and compliance posture. Sounds interesting? Here's a more detailed description of what you will do in this role: Support daily InfoSec operations: access reviews, vulnerability tracking, security control checks. Manage documentation, evidence collection, and coordination for ISO 27001, SOC 2, GDPR/DPDP, HIPAA and other compliance programs. Respond to customer security & compliance questionnaires with guidance from CISO. Perform access reviews, user onboarding/offboarding checks, and permission hygiene. Work with the CISO on implementing controls, improving security processes, and responding to customer security requests. This is a Bengaluru-based role. We work five days a week from the office, as we believe in-person interactions fuel innovation and agility. What does success look like in this role? Success means becoming the steady guardian of security—keeping audits smooth, controls sharp, and risks quiet before they grow teeth.

You have 0.5–2 years of experience in InfoSec, GRC, or compliance with a solid grasp of key frameworks. You understand essential security controls, access practices, and cloud/SaaS environments. You communicate clearly, document well, and handle multiple compliance tasks with steady attention.