We are seeking an experienced IT Risk & Cybersecurity GRC professional (6+ years) to oversee our governance, internal audit readiness, regulatory compliance posture and user access review framework within a regulated insurance workplace.
The role will play a critical part in managing internal audits, IRDAI/CERT-IN compliance, user access governance, third-party risk, control testing and executive risk reporting.
The ideal candidate must have hands-on experience as both:
- An auditee for regulatory and internal audits
- A control assessor / reviewer conducting independent internal reviews
Key Responsibilities
Risk & Control Governance
- Strong understanding of IT Risk Management lifecycle (Integrated Risk Management, Risk and Control Self-Assessment, Information Risk Assessment, Business Impact Assessment)
- Perform risk assessments and control testing across IT and cybersecurity domains
- Identify control gaps and design new controls aligned with evolving threat landscape
- Track and ensure timely closure of audit observations and risk issues
- Maintain risk registers and document risk acceptance where applicable
- Coordinate security incident reporting, root cause analysis and remediation tracking.
Internal & Regulatory Audit Management
- Act as primary auditee for:
- IRDAI Cyber Security Audits
- CERT-IN compliance
- Internal audits (including Big 4)
- Financial & ITGC audits
- Coordinate evidence submission and stakeholder responses
- Conduct internal mock audits to assess control effectiveness
- Ensure 100% closure of audit issues within agreed timelines
- Track remediation and report to senior leadership
User Access Governance
- Deep understanding of:
- Privileged Access Reviews
- Normal User Access Reviews
- Role-based access control (RBAC)
- Segregation of Duties (S
📌 GRC Specialist (Gurugram)
🏢 Aviva India
📍 Gurugram
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.