Security Scrum Master
About this opportunity
Career Category
Information Systems
Job Description
Role Summary:
The Scrum Master is an agile coach responsible for enabling CDT/GRC teams to deliver high-quality outcomes through Agile execution, continuous improvement, and strong stakeholder engagement. The role ensures predictable delivery of cybersecurity risk, control, and compliance initiatives.
Key Responsibilities:
Facilitate Scrum capability including sprint planning, daily stand-ups, sprint reviews, and ensure sprint goals are clearly defined and tracked Maintain sprint discipline and Agile best practices.
Guide and coach teams on Agile principles, Scrum practices, and secure-by-design approaches.
Collaborate with the Product Owner to prioritize and refine the backlogs, track delivery progress through Agile metrics, and ensure security and compliance requirements are incorporated into backlog items.
Identify, track, and remove impediments, including those related to risk and control implementation and drive faster resolution of dependency-related issues.
Support cross-functional coordination between engineering, security, and GRC teams, ensure adherence to Agile principles, security policies, and organizational governance standards.
Maintain dashboards for sprint metrics, risk status, and control delivery while publishing regular updates on sprint outcomes, risks, control gaps, audit readiness, and evidence tracking.
Preferred Qualifications
Partner with Product Owners using generative AI to draft refined user stories, structure and acceptance criteria.
Implement and manage AI-powered meeting assistants to record standups, log notes, and auto-sync action items into Jira.
Design custom AI prompt libraries to help developers accelerate brainstorming, estimate story points, or draft technical documentation templates.
Bachelor’s degree in computer science and 2 to 6 years of experience in Information Systems or related field
Around 2 years of experience as a Scrum Master
Certified Scrum Master (CSM), Professional Scrum Master (PSM), or equivalent certification
Strong understanding of Agile frameworks (Scrum, Kanban, SAFe)
Experience working within GRC, cybersecurity, or regulated environments
Familiarity with ISO 27001, NIST CSF, COBIT, ServiceNow and ITIL frameworks
Experience integrating compliance and security controls into Agile workflows
Strong facilitation, coaching, and conflict resolution skills
Proven ability to drive Agile maturity and continuous improvement
Strong communication skills, including explaining technical concepts to non-technical stakeholders
Ability to work in large/global corporate environments with distributed teams
Familiarity with Jira, Azure DevOps, or similar tools
Proficient in language for Business communication
*Shift: 2:00 PM – 11:00 PM IST
.
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 1097 comparable Information Technology roles across 55 biopharma companies.
Salary context
143 of 1097 peers report a salary range (USD, annualized)
Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.
Where these roles are based
Top locations among the 1097 comparable roles
+ 23 more countries
Seniority mix
612 of 1097 peers have a known seniority level
Therapeutic area mix
1 of 1097 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.