Key Result Areas
Supporting Actions
Regulatory & Compliance Audits for Payments
Lead and coordinate payment?industry regulatory audits such as RBI, NPCI, PCI?DSS, , CERT?IN, etc.
Manage end?to?end audit activities including audit calendar management, documentation preparation, evidence collection, and stakeholder coordination.
Track audit observations/findings and ensure timely closure with respective control owners.

Regulatory compliances
Identify all regulatory compliance requirements.
Review and update the policies to ensure identified regulatory requirements are drafted in policies.
Conduct the assessments to ensure implemented controls are meeting to regulatory compliances.

Data Loss Prevention (DLP) & Proxy Governance
Review, implement, and maintain DLP and Proxy policies across the organization.
Perform DLP and Proxy exception reviews, ensuring justification, approval, and tracking.
Conduct ongoing monitoring and analysis of High and Medium severity DLP incidents.
Collaborate with IT/security teams to fine?tune policies and reduce false positives.





Control Validation & Compliance Monitoring
Perform control validation to ensure compliance with internal policies, procedures, and regulatory guidelines.
Execute periodic checks on access management, data protection controls, endpoint security, and network controls.
Document deviations and drive corrective action plans with respective teams.

Conduct Third-Party risk assessments
Understand the business requirement from proposed solution, connect with the vendor and functional/data/IT SPOCs to understand the architecture of the proposed solution’s integration and data movement
Conduct the InfoSec/cyber risk assessment to identify InfoSec/cyber related risks and regulatory requirement’s compliance
Submit the risk assessment report to concern stakeholders with highlighting residual InfoSec/cyber risks and provide mitigation recommendation for the same
Track with businesses to ensure

📌 Grc Manager Thane
🏢 Financial services
📍 Thane