About Galytix

Galytix (GX) is a risk-domain specialised AI firm serving 30+ financial institutions globally. Its Risk-Specialised AI Agents built over 10 years in CreditX and ClaimsX operate as 24/7 Digital Workers unlocking value by autonomously performing hundreds of tasks traditionally handled by human Relationship Managers, Credit Officers and Claims Professionals. By augmenting human teams with purpose-built, domain-specialised AI, GX supercharges productivity, strengthens risk and transforms decision-making, and delivers a step-change in client experience — empowering financial institutions to be at the forefront of driving AI-led transformation.

Position Overview:

We are looking for a motivated junior security professional to own GRC operations for GX's India office. The primary mission is straightforward: ensure that local IT processes and controls are aligned with the group security framework and ISO 27001 requirements, keep the documentation current, support the Global CISO in audits and reviews, and support local teams when security questions or incidents arise in India.

This is a hands-on, learning-oriented role. You will work closely with the Global CISO, the IT team, and development colleagues, gaining broad exposure to enterprise security governance in a regulated-sector AI environment. We will invest in your development as you grow with us.

Key Responsibilities:

• GRC & ISO 27001 — Primary Focus

o Maintain the ISMS documentation for the India office — policies, procedures, risk register, asset inventory, SoA

o Track and report on compliance with group-level controls, flag gaps and escalate to CISO

o Support the annual risk assessment cycle — gather evidence, update the risk register, prepare summaries





o Prepare documentation and evidence packages for internal and external audits

o Monitor local regulatory obligations (DPDPA 2023, CERT-In rules) and flag any compliance gaps

o Maintain the corrective action register, chase owners and report on closure progress

• Process Assurance

o Perform periodic checks that key controls are operating as described in policy — e.g. access reviews, backup verification, patch status

o Compile evidence for CISO reviews; produce simple, clear metrics on security posture

o Support continuous improvement initiatives identified during audits or reviews

• Vendor & App Risk Support

o Run the first-pass security assessment when users request a current application or service

o Maintain the vendor/third-party register

o Flag contractual or data-handling concerns to CISO and legal for resolution

• Incident Response & Security Operations

o Support local security response to security incidents

o Contribute to post-incident reviews and lessons-learned documentation

• IT & Team Support

o Deliver security awareness sessions and onboarding briefings for India staff

o Support application security review activities alongside development teams

What We Are Looking For

- 5 years in IT, IT security, or a GRC-adjacent role
- Working knowledge of ISO 27001 or similar framework




- Understanding of core IT security concepts: IAM, network basics, cloud, endpoint
- Comfort working with policy and process documentation
- Strong written English — policies and reports are a key output
- Organized and detail-oriented — GRC is 80% rigor

Exposure to ISO 27001 implementation or audit

- Familiarity with DPDPA 2023 or Indian IT regulation
- Experience with Azure or AWS environments
- Any security certification (CompTIA Security+, ISO 27001 Foundation/Associate)
- Knowledge of SAST/DAST concepts or application security basics
- Experience with SharePoint

Why you don't want to miss this career opportunity:

- We are a mission-driven firm that is revolutionising the Insurance and Banking industry. We are not aiming to incrementally push the current boundaries, we redefine them.
- Customer centric organisation with innovation at the core of everything we do.
- Capitalise on an unparalleled career progression opportunity.
- Work closely with senior leaders who have individually served several CEOs in Fortune 100 companies globally.
- Develop highly valued skills and build connections in the industry by working with top-tier Insurance and Banking clients on their mission-critical problems and deploying solutions integrated into their day-to-day workflows and processes.
- At Galytix, we're experiencing rapid growth—especially in India, where we are building the largest team and are rapidly expanding our footprint. We're at a turning point, where we're transitioning to becoming a global leader in AI. This is your chance to join a fast-paced, high-impact company at the heart of its growth, where you'll have a chance to directly shape its future.

📌 Information Technology Security Specialist (Gurugram)
🏢 Galytix
📍 Gurugram