GRC Lead

Key Responsibilities
• Develop and maintain the organization's GRC strategy, framework, and policies.
• Ensure compliance with SEBI, RBI, NCIIPC, and other relevant regulations and guidelines.
• Conduct risk assessments and maintain risk registers, recommending mitigation plans.
• Manage internal and external audits and ensure timely closure of audit findings.
• Drive security awareness and compliance training initiatives across the organization.
• Provide GRC reports and dashboards for senior management and regulators.

Work Experience:
8+ years of experience in governance, risk, and compliance roles with at least 3 years in GRC leadership.

Skills & Qualification:
• Bachelor’s degree in information security, Risk Management, or related field.
• Strong knowledge of regulatory requirements (SEBI, RBI, ISO 27001, NIST, etc.).
• Experience in risk assessment, control testing, and audit management.
• Excellent analytical, communication, and policy development skills.
• Relevant certifications (CISA, CRISC, ISO 27001 LA, or equivalent) preferred.