KEY RESPONSIBILITIES

Governance, Risk & Compliance

- Lead and provide strategic advisory support for compliance with PCI-DSS, ISO 27001, RBI guidelines, J-SOX, and other applicable regulatory frameworks.
- Design, implement, and continuously enhance the Information Security & GRC program, including policies, procedures, controls, awareness initiatives, and monitoring mechanisms.
- Own and manage enterprise-wide risk assessments, vulnerability management activities, and compliance gap analyses.

Audit & Assurance

- Plan and conduct internal audits across business units, suppliers, and vendors to assess information security and compliance maturity.
- Act as the primary point of contact for internal, external, and third-party audits, including audit coordination, evidence preparation, and closure of audit findings.
- Review and analyze SOC monitoring outputs and VAPT reports, identify non-compliance issues, and drive remediation in collaboration with technology and business teams.

Leadership & Collaboration





- Lead, mentor, and guide junior GRC / Information Security team members, ensuring effective task allocation and continuous skill development.
- Collaborate closely with IT, Engineering, Legal, Compliance, Risk, and Business stakeholders to embed security best practices into organizational processes and projects.
- Prepare and present transparent, concise risk and compliance reports to senior management and leadership.

Awareness & Continuous Improvement

- Design and deliver Information Security awareness and training programs across the organization.
- Track regulatory changes, emerging cyber threats, and industry best practices to continuously enhance the organizations cybersecurity posture.
- Support the implementation and optimization of GRC tools, risk registers, and audit management platforms.

📌 Senior Security Analyst (Maharashtra)
🏢 Abacus Consultants
📍 Maharashtra