Were Hiring for Governance, Risk and Compliance (GRC) Specialist

Requirements :
Location: Pune
Department: Information Technology Information Security
CTC: Up to 25 LPA
Experience: 5+ Years
Reporting To: Chief Information Security Officer (CISO)
Travel: Up to 10%

Key Responsibilities
Manage ISO 27001, ISO 42001, and SOC 2 audit and certification activities.
Prepare audit evidence, coordinate control testing, and work with external auditors.
Create and maintain information security policies, procedures, standards, and controls.
Maintain the organization's risk register and track risk mitigation activities.
Conduct vendor and third-party security risk assessments.
Review vendor security documents such as SOC 2 reports and penetration testing reports.
Complete client security questionnaires and due diligence assessments.
Manage and track compliance activities using GRC/compliance platforms.
Monitor applicable security and regulatory requirements such as NIST CSF, NIST RMF, and GLBA.
Support security audits, evidence collection, gap assessments,



and closure of audit findings.
Manage security awareness training, phishing simulations, and policy attestations.
Support cybersecurity and AI governance advisory projects, including gap analysis and documentation.
Coordinate compliance activities across different offices and business entities.
Work with clients, auditors, vendors, and internal teams to resolve security and compliance requirements.
Required Experience
5+ years of experience in Information Security, GRC, IT Audit, Risk, or Compliance.
Minimum 2 years of experience managing ISO 27001 or SOC 2 audits/certifications.
Minimum 2 years of experience in vendor/third-party risk assessments.
Minimum 2 years of experience creating information security policies and procedures.
Valuable understanding of ISO 27001, SOC 2, NIST CSF, NIST RMF, and GLBA.
Experience working with GRC or compliance management tools.
Experience

📌 Governance, Risk And Compliance Pune
🏢 Career Guideline
📍 Pune