About the role
- Develop, implement, and maintain the GRC framework for information security.
- Conduct regular audits to assess the effectiveness of security controls and compliance with regulations and internal policies.
- Collaborate with internal stakeholders to identify and mitigate information security risks.
- Ensure compliance with relevant regulatory requirements, laws: including data protection laws and industry standards.
- Prepare detailed audit reports and present findings to senior management, along with remediation recommendations.
- Monitor changes in regulations and industry standards to ensure ongoing compliance.
- Facilitate training and awareness programs for employees on security policies and regulatory requirements.
- Work closely with IT and other departments to ensure integration of security controls into business processes.
- Strong understanding of Information security and control frameworks (e.g., ISO 27001/27002, COBIT, NIST).
- Knowledge of regulatory requirements specific to the financial services sector, including SEBI, DPDPA, etc.
- Excellent analytical skills and attention to detail for conducting audits and assessments.
- Strong communication and interpersonal skills to effectively convey compliance requirements.
- Ability to work independently and collaboratively in a cross-functional environment.
- Proficiency in GRC tools and audit methodologies.