KEY RESPONSIBILITIES

Governance, Risk &
Compliance
Lead and provide strategic advisory support for compliance with PCI-DSS, ISO 27001, RBI guidelines, J-SOX, and other applicable regulatory frameworks.
Design, implement, and continuously enhance the Information Security &
GRC program, including policies, procedures, controls, awareness initiatives, and monitoring mechanisms.
Own and manage enterprise-wide risk assessments, vulnerability management activities, and compliance gap analyses.

Audit &
Assurance
Plan and conduct internal audits across business units, suppliers, and vendors to assess information security and compliance maturity.
Act as the primary point of contact for internal, external, and third-party audits, including audit coordination, evidence preparation, and closure of audit findings.
Review and analyze SOC monitoring outputs and VAPT reports, identify non-compliance issues, and drive remediation in collaboration with technology and business teams.

Leadership &




Collaboration
Lead, mentor, and guide junior GRC / Information Security team members, ensuring effective task allocation and continuous skill development.
Collaborate closely with IT, Engineering, Legal, Compliance, Risk, and Business stakeholders to embed security best practices into organizational processes and projects.
Prepare and present transparent, concise risk and compliance reports to senior management and leadership.

Awareness &
Continuous Improvement
Design and deliver Information Security awareness and training programs across the organization.
Track regulatory changes, emerging cyber threats, and industry best practices to continuously enhance the organizations cybersecurity posture.
Support the implementation and optimization of GRC tools, risk registers, and audit management platforms.

📌 Senior Security Analyst Thane (India)
🏢 Abacus Consultants
📍 India