Job description
The GRC Lead will manage governance, risk, and compliance frameworks to ensure regulatory adherence and reduce organizational risk exposure.
Key Responsibilities
Develop and maintain the organization's GRC strategy, framework, and policies. Ensure compliance with SEBI, RBI, NCIIPC, and other relevant regulations and guidelines. Conduct risk assessments and maintain risk registers, recommending mitigation plans. Manage internal and external audits and ensure timely closure of audit findings.
Drive security awareness and compliance training initiatives across the organization. Provide GRC reports and dashboards for senior management and regulators.
Requirements
8+ years of experience in governance, risk, and compliance roles with at least 3 years in GRC leadership. Skills & Qualifications: Bachelor’s degree in information security, Risk Management, or related field. Strong knowledge of regulatory requirements (SEBI, RBI, ISO 27001, NIST, etc.) Experience in risk assessment, control testing, and audit management.
Excellent analytical, communication, and policy development skills. Relevant certifications (CISA, CRISC, ISO 27001 LA, or equivalent) preferred.