GRC / Compliance Executive

About the Role

We are seeking a proactive and detail-oriented GRC (Governance, Risk & Compliance) Executive to strengthen our information security and regulatory compliance framework. The role involves maintaining ISO 27001 documentation, ensuring RBI and IT Act compliance, driving policies and SOP rollouts, and coordinating internal / external audits.

This position is ideal for candidates with a strong understanding of information security and NBFC regulatory requirements, who can translate compliance frameworks into effective operational practices.

Key Responsibilities

1. Information Security Governance (ISMS & Risk Management)

• Maintain and update ISMS documentation, policies, and control procedures in alignment with ISO 27001.
• Maintain and track the risk register, ensure periodic risk reviews, and drive closure of risk mitigation actions.
• Support ISMS internal audits, external certification audits, and management reviews.
• Maintain evidence for controls such as access management, data classification, asset management, and vendor compliance

2. Regulatory Compliance (RBI, IT Act, CERT-IN, etc.)

3. Policy and SOP Rollout

4. Audit Coordination & Evidence Management

Preferred Skills & Competencies

Education & Qualifications

Why Join Us

Location : Mumbai

Working days : 5 days

Skills Required

Risk Management, Iso 27001, Excel