PhonePe - Site Reliability Engineer - Audit & Compliance Enablement (4-7 yrs)

Job Title : Site Reliability Engineer - Audit & Compliance Enablement

Grade : G4

Location : Bangalore

Team : Site Reliability Engineering (SRE)

About the Role :

As a Site Reliability Engineer in the SRE Audit & Compliance Enablement team, you will play a key role in ensuring PhonePe's infrastructure and operations are always audit-ready.

You'll combine technical depth with process rigor to build a sustainable, scalable, and proactive approach to audit readiness-spanning systems, backups, documentation, and control validation.

Key Responsibilities :

Audit & Compliance Enablement :

- Create and maintain reusable evidence artifacts (e.g. , access logs, architectural diagrams, control narratives).

- Represent SRE systems during audit walkthroughs and demos.

- Collaborate with Compliance, InfoSec, and SRE domain owners for control gap closures and evidence gathering.

Backup & Archival Infrastructure :

- Own and operate infrastructure responsible for backups of databases, application/system logs, and audit logs.

- Perform scheduled validations including data restores and integrity checks.

- Maintain and update a comprehensive catalog of backup datasets and their retention policies.

- Generate audit-friendly backup status reports and recovery evidence.

Infra Scans & Coordination :

- Support scheduling and execution of VAPT, configuration reviews, access reviews, and internal audits.

- Track issues to closure by working with SRE and platform teams.

Automation & Tooling :

- Build scripts and tools to automate evidence generation and health checks (e.g., backup
summaries, uptime reports).

- Maintain audit SOPs, checklists, and internal documentation to drive repeatability and consistency.

Required Skills & Experience :

- 4-7 years of experience in SRE, Infrastructure, or Platform roles with strong Linux and cloud fundamentals.

- Hands-on experience managing or validating backup and archival systems.

- Familiarity with log management, monitoring, and observability platforms.

- Exposure to compliance and audit requirements (e.g., ISO 27001, PCI-DSS, SOC 2).

- Strong scripting skills in Shell/Python/Perl and comfort with automation tooling (e.g., Ansible, Terraform).

- Excellent documentation and collaboration skills.

Preferred Qualifications :

- Experience working closely with InfoSec or Compliance teams on audits or certification cycles.

- Exposure to enterprise backup and DR systems.

- Prior ownership of critical infra components with clear SLAs.

- Certifications in cloud platforms, security, or compliance frameworks