Security & Compliance Lead

Ovii's Interpretation of the Role

PlayPower Labs seeks a security‑focused leader to own product, cloud, and vendor security and compliance. The role blends hands‑on security engineering with practical governance to keep the team moving fast while protecting data and AI tools.

Role Snapshot

• Security & Compliance ownership
• Product‑aware security engineering
• AI‑tool risk management
• Compliance framework readiness
• Remote‑first, India‑only

Must-Have Requirements

• Strong experience in security, compliance, risk, or application/cloud security
• Good understanding of OWASP, cloud security, IAM, secrets management, vulnerability scanning, CI/CD security, and incident response
• Strong working knowledge of HIPAA Privacy, Security, and Breach Notification Rules
• security
• compliance
• risk management
• cloud security

Nice-to-Have Signals

• Familiarity with compliance frameworks like SOC 2, ISO 27001, GDPR
• AI‑native mindset for tool and data leakage risk
• Built security/compliance programs from scratch at a startup
• AI governance, agent security, MCP security, LLM data privacy
• Automated security checks, compliance evidence, access or vendor reviews
• AI governance
• startup security program building

Work Setup

• Location: India
• Work mode: REMOTE
• Remote scope: COUNTRY_RESTRICTED
• Remote countries: India
• Employment type: Full-Time

Not Specified in JD

• Visa sponsorship
• Salary range
• Education requirement
• Certifications
• Relocation
• Notice period
• Travel
• Security clearance
• Coding test
• Portfolio
• GitHub
• Writing sample
• Cover letter

What You'll Likely Work On

• Define and enforce security controls for authentication, access, secrets, data privacy, infrastructure and deployments
• Create safe usage policies for AI tools, agents, MCP servers and automation workflows
• Run vulnerability management, security reviews, risk assessments and incident‑response planning
• Lead compliance readiness for SOC 2, ISO 27001, GDPR or similar frameworks
• Guide teams on handling sensitive data, especially when using AI‑driven services
• Educate engineers on secure development, AI safety and common attack patterns
• Apply a startup mindset to deliver fast, practical security fixes without unnecessary bureaucracy

Good Fit If You Have

• Product‑mindset with ability to balance speed and security
• Calm under pressure and resistant to unnecessary paperwork
• Interest in AI governance and data‑privacy challenges