We are seeking an experienced IT Risk & Cybersecurity GRC professional (6+ years) to oversee our governance, internal audit readiness, regulatory compliance posture and user access review framework within a regulated insurance environment.
The role will play a critical part in managing internal audits, IRDAI/CERT-IN compliance, user access governance, third-party risk, control testing and executive risk reporting.
The ideal candidate must have hands-on experience as both:
An auditee for regulatory and internal audits
A control assessor / reviewer conducting independent internal reviews
Key Responsibilities
Risk & Control Governance
Robust understanding of IT Risk Management lifecycle (Integrated Risk Management, Risk and Control Self-Assessment, Information Risk Assessment, Business Impact Assessment)
Perform risk assessments and control testing across IT and cybersecurity domains
Identify control gaps and design new controls aligned with evolving threat landscape
Track and ensure timely closure of audit observations and risk issues
Maintain risk registers and document risk acceptance where applicable
Coordinate security incident reporting, root cause analysis and remediation tracking.
Internal & Regulatory Audit Management
Act as primary auditee for:
IRDAI Cyber Security Audits
CERT-IN compliance
Internal audits (including Big 4)
Financial & ITGC audits
Coordinate evidence submission and stakeholder responses
Conduct internal mock audits to assess control effectiveness
Ensure 100% closure of audit issues within agreed timelines
Track remediation and report to senior leadership
User Access Governance
Deep understanding of:
Privileged Access Reviews
Normal User Access Reviews
Role-based access control (RBAC)
Segregation of Duties (SoD)
Joiner-Mover-Leaver (JML) process
Conduct pe
📌 GRC Specialist (Gurugram)
🏢 Aviva India
📍 Gurugram
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.