Job Overview

We are looking for a Governance, Risk & Compliance (GRC) Specialist to support regulatory compliance, risk management, data protection, and governance initiatives. The ideal candidate will have experience in information security, compliance, risk assessments, and privacy-related regulations, with the ability to work closely with legal, technology, risk, and business teams.

Candidates with experience in GDPR, India's Digital Personal Data Protection (DPDP) Act, information security compliance, privacy risk assessments, or third-party risk management are encouraged to apply.

Key Responsibilities

- Support governance, risk management, and regulatory compliance initiatives.
- Conduct risk assessments, compliance gap assessments, and Data Protection Impact Assessments (DPIAs).
- Support data protection and privacy compliance in line with applicable regulations, including GDPR and India's DPDP Act.
- Assist with data mapping, data inventories, data classification, data retention, consent management, and data subject rights processes.
- Monitor regulatory updates and assess their impact on business operations, policies, and procedures.
- Support internal audits, compliance reviews, regulatory inspections, and remediation tracking.
- Assess third-party and vendor risks, including data protection and information security controls.
- Support privacy-by-design practices and the integration of compliance requirements into business and technology processes.
- Assist with privacy incident management, breach reporting, and corrective action tracking.
- Prepare and maintain risk registers, compliance documentation, policies, procedures, and management reports.
- Coordinate with legal,



information security, technology, risk, and business stakeholders to strengthen governance and compliance.

Required Skills & Qualifications

- 6–8 years of experience in Governance, Risk & Compliance (GRC), Information Security, Data Protection, Regulatory Compliance, Risk Management, or a related field.
- Understanding of information security frameworks and regulatory compliance requirements.
- Knowledge of GDPR, India's DPDP Act, or other applicable data protection regulations.
- Experience in risk assessments, compliance reviews, audits, control testing, or third-party risk management.
- Exposure to privacy assessments, data protection controls, or regulatory compliance initiatives.
- Strong analytical, documentation, communication, and stakeholder management skills.

Preferred Skills

- Experience in banking, financial services, fintech, capital markets, insurance, or other regulated industries.
- Familiarity with DPIA/PIA, Records of Processing Activities (RoPA), privacy-by-design, consent management, and data subject rights.
- Knowledge of ISO 27001, ISO 27701, SOC 2, or similar risk and compliance frameworks.
- Certifications such as CIPP, CIPM, CIPT, ISO 27701 Lead Implementer, or ISO 27701 Lead Auditor will be an advantage.

Who Should Apply? Professionals working in GRC, Information Security Compliance, Technology Risk, IT Risk, Regulatory Compliance, Third-Party Risk Management, or Data Protection who have exposure to privacy regulations and compliance activities.

Candidates with solid risk and compliance experience and an understanding of data protection requirements are encouraged to apply.

Pay: Up to ₹2,200,000.00 per year

Work Location: In person

📌 Governance, Risk and Compliance (GRC) Specialist (Mumbai)
🏢 FuGenEd(An Incubation Center)
📍 Mumbai