Head DDIT ISC Software Development Governance, Integrity & Secure Software Development Life Cycle (SDLC)

Overview

Own enterprise governance for secure, compliant, audit-ready software delivery across the SDLC. Lead policy/control-as-code and automated evidence pipelines as a hands-on individual-contributor.

What you'll do

• Own enterprise policy, standards, and controls for software engineering across source control, review, testing, and release management.
• Rationalize overlapping GxP, SOX, privacy, security, and IT-quality requirements into a single risk-based framework.
• Implement policy as code and controls as code, including branch protections, signed commits, approvals, and immutable audit trails.
• Build automated continuous evidence pipelines and define control telemetry like coverage and exceptions.
• Define secure-by-default guardrails and align controls with frameworks such as NIST SSDF, ISO/IEC 27001, and IEC 62304 where applicable.
• Set governance controls for AI-assisted and AI-containing engineering and products, including provenance and human accountability.
• Serve as technical authority for inspections, audits, certifications, and SDLC remediation and publish practical guidance.

What you'll need

• 10+ years in software engineering/platform engineering/DevSecOps/engineering quality.
• Hands-on production coding and ability to read and modify CI/CD pipelines, IaC, and policy code unaided.
• Experience designing/operating automated controls that replace manual compliance work in regulated environments.
• Working fluency with regulated-software requirements including GxP and 21 CFR Part 11 (and related named standards).
• Security engineering depth including application security and software supply chain security.
• Credible technical judgement on AI in the SDLC, including tooling and governance implications.
• Excellent written English.

Details

• Location: Hyderabad (Office).