Security Scrum Master

Job description

Career Category Information Systems Job Description Role Summary: The Scrum Master is an agile coach responsible for enabling CDT/GRC teams to deliver high-quality outcomes through Agile execution, continuous improvement, and strong stakeholder engagement. The role ensures predictable delivery of cybersecurity risk, control, and compliance initiatives. Key Responsibilities: Facilitate Scrum capability including sprint planning, daily stand-ups, sprint reviews, and ensure sprint goals are clearly defined and tracked Maintain sprint discipline and Agile best practices. Guide and coach teams on Agile principles, Scrum practices, and secure-by-design approaches. Collaborate with the Product Owner to prioritize and refine the backlogs, track delivery progress through Agile metrics, and ensure security and compliance requirements are incorporated into backlog items. Identify, track, and remove impediments, including those related to risk and control implementation and drive faster resolution of dependency-related issues. Support cross-functional coordination between engineering, security, and GRC teams, ensure adherence to Agile principles, security policies, and organizational governance standards. Ensure user stories include security acceptance criteria, track ISRA findings, audit issues, and control requirements in JIRA, and monitor closure of risk and compliance-related tasks. Maintain dashboards for sprint metrics, risk status, and control delivery while publishing regular updates on sprint outcomes, risks, control gaps, audit readiness, and evidence tracking. Preferred Qualifications Bachelor’s degree in computer science and 2 to 6 years of experience in Information Systems or related field 3+ years of experience as a Scrum Master or Agile Coach in IT or Cybersecurity environments Certified Scrum Master (CSM), Professional Scrum Master (PSM), or equivalent certification Strong understanding of Agile frameworks (Scrum, Kanban, SAFe) Experience working within GRC, cybersecurity, or regulated environments Knowledge of ISRA/ISA processes, audit lifecycle, and control assurance practices Familiarity with ISO 27001, NIST CSF, COBIT, ServiceNow and ITIL frameworks Experience integrating compliance and security controls into Agile workflows Strong facilitation, coaching, and conflict resolution skills Proven ability to drive Agile maturity and continuous improvement Strong communication skills, including explaining technical concepts to non-technical stakeholders Ability to work in large/global corporate environments with distributed teams Familiarity with Jira, Azure DevOps, or similar tools Proficient in language for Business communication *Shift: 2:00 PM – 11:00 PM IST .