Were Hiring for Governance, Risk and Compliance (GRC) Specialist

Requirements

- Location: Pune
- Department: Information Technology Information Security
- CTC: Up to 25 LPA

- Experience: 5+ Years
- Reporting To: Chief Information Security Officer (CISO)

- Travel: Up to 10%

Key Responsibilities

- Manage ISO 27001, ISO 42001, and SOC 2 audit and certification activities.
- Prepare audit evidence, coordinate control testing, and work with external auditors.
- Create and maintain information security policies, procedures, standards, and controls.
- Maintain the organization's risk register and track risk mitigation activities.
- Conduct vendor and third-party security risk assessments.
- Review vendor security documents such as SOC 2 reports and penetration testing reports.
- Complete client security questionnaires and due diligence assessments.
- Manage and track compliance activities using GRC/compliance platforms.
- Monitor applicable security and regulatory requirements such as NIST CSF, NIST RMF, and GLBA.
- Support security audits, evidence collection, gap assessments, and closure of audit findings.
- Manage security awareness training, phishing simulations, and policy attestations.
- Support cybersecurity and AI governance advisory projects, including gap analysis and documentation.
- Coordinate compliance activities across different offices and business entities.




- Work with clients, auditors, vendors, and internal teams to resolve security and compliance requirements.

- Required Experience
- 5+ years of experience in Information Security, GRC, IT Audit, Risk, or Compliance.
- Minimum 2 years of experience managing ISO 27001 or SOC 2 audits/certifications.
- Minimum 2 years of experience in vendor/third-party risk assessments.
- Minimum 2 years of experience creating information security policies and procedures.
- Valuable understanding of ISO 27001, SOC 2, NIST CSF, NIST RMF, and GLBA.
- Experience working with GRC or compliance management tools.
- Experience communicating with clients, auditors, and vendors.
- Experience in financial services, banking, mortgage, or other regulated industries is preferred.

- Preferred Experience
- Experience with ISO 42001 / AI Governance.
- Experience with AI risk and compliance frameworks.
- Experience administering GRC/compliance automation platforms.

- Education
- Bachelor's degree in Information Security, Computer Science, IT, or a related field.
- Master's degree is preferred.

- Certifications Any of the following certifications would be preferred:

- CISSP

- CISA

- CRISC

- ISO 27001 Lead Auditor

- ISO 27001 Lead Implementer
- ISO 42001 Lead Auditor / Lead Implementer

📌 Governance, Risk and Compliance (GRC) Specialist (Pune)
🏢 Career Guideline
📍 Pune