Engineering Lead - DLP, DSPM

About SARC and DataSurity

DataSurity is SARC's Privacy compliance platform, now signing its first enterprise clients. It helps Indian regulated companies, mostly banks, NBFCs and PSUs, run privacy compliance as software instead of spreadsheets.

SARC is a 40-year-old advisory firm with 100+ partners and 500+ professionals across India, the UK, the UAE, Singapore and the USA. Its practices cover cybersecurity, data protection, regulatory advisory and RegTech.

The Role

You will own DataSurity's engineering: its architecture, its build and its security. You will lead a lean team of engineers.

1. Own the architecture. Make and write down the technical decisions: data model, module boundaries, identity, tenancy and client APIs.
2. Run the build. SLDC. Decide which changes need an independent review. Make sure tests prove what they claim, for example by removing a check and confirming its test fails.
3. Lead the team. Set work, review it and grow the engineers and contractors. Direct AI coding sessions with the same care as people: clear briefs, stated rules, reviewed output.
4. Own security. Client data isolation, sign-in and SSO, signed tokens, key management, logging without personal data, monitoring and incident response. Be ready for a bank's security review.
5. Lead client integration. Run technical sessions with clients' teams, answer CISO questionnaires, and design each client's integration: web SDK, server-to-server APIs and, later, mobile SDKs.
6. Run the environments. Staging, demo and production, deploys, backups and releases.
7. Shape the roadmap and help hire the next engineers.

What you bring

• Min 8 to 12 years in engineering , including building a security or privacy product from the ground up: DLP, DSPM, data discovery, CASB, consent management or identity. Built, not used or sold.
• Data security depth. You know how sensitive data is found, classified and protected, and what makes a detector precise rather than noisy.
• Multi-tenant SaaS architecture. You have kept many clients' data apart in one system (for example Postgres row-level security), and built sign-in, SSO, signed tokens and key management.
• Still hands-on. You write and review code, ideally TypeScript and Node, with solid SQL and Postgres.
• Team leadership. You have led 3 to 8 engineers, including contractors, and set a review culture others follow.
• Fluent with AI coding tools , such as Claude Code. You can brief them, check their work, and catch what they get wrong.
• Clear communicator. You can hold your own with a bank's CISO, and write short, plain documents.

Strong Plus

• Data Protection, Privacy, Leakage and Data Security
• Mobile security: native SDKs and device-bound keys on Android and iOS.
• AWS in India: hosting, backups and data-residency setups for regulated clients.

Location: South Delhi - In Office