Ability to learn, understand and work with team to gain insight into risk, compliance and awareness functions.
Responsibilities
- Identify, assess, and monitor security risks; perform risk assessments and recommend mitigation strategies.
- Maintain risk register and report to leadership.
- Develop, review, and enforce security policies aligned with frameworks (e.g., ISO 27001,
NIST, CIS) and regulations (e.g., DPDP).
- Ensure policy compliance and deliver training. Support audits (SOC 2, ISO, RBI), gather evidence, and document controls. Participate in security governance programs and define risk KPIs.
- Evaluate third-party risks, review assessments, and work with procurement/legal.
- Support incident response through policy oversight and post-incident review.
- Promote security awareness and maintain all documentation and reports.