Information Security Governance Specialist Who we are: FlexiLoans is a technology based Digital financing platform started with an endeavor to solve the problems that small businesses face in accessing Quick, Flexible and Adequate funds for growing their Businesses. Our vision is to give "Financial access at a click". Our talent pool has rockstars from diverse backgrounds
- ex
- Founders, investment bankers, e-commerce and payments with the passion to make a difference to the lives of 70 mn+ MSME businesses in India. FlexiLoans.com is a pioneer in the ecosystem-based digital lending for small businesses in India. Till date, we have disbursed over 100,000+ loans worth over Rs. 5,000 Crs+ to small sized businesses across 3,200+ cities without having a single branch We are the leaders in using technology and risk models that focus on alternate / surrogate methods for scoring customers. Our origination is 100% digital with over 100 embedded partnerships like Amazon, Flipkart, Nykaa, Paytm, Paisabazaar, META, etc. for providing credit access to MSME businesses. Founded by CA/ISB alumni, FlexiLoans is funded by marquee funds and HNIs in the form of MAJ invest, Fasanara Capital, Sanjay Nayar (Founder
- Sorin Investments, Chairman
- KKR India and Ex-CEO, Citibank South Asia), Dr. Harry Banga (Founder, Caravel group), Yogesh Mahansaria (Founder, Alliance Tyres) Gunit Chaddha (Ex-CEO, Deutsche Bank, Asia Pacific), Anil Jaggia (Ex-CIO, HDFC Bank), Vikram Sud (Ex-COO, Kotak Mahindra Bank), Narayan Seshadri (Ex-Managing Partner, KPMG), Gopal Srinivasan (Chairman, TVS Capital) and Siddharth Parekh (Co-Founder, Paragon Partners) to name a few. Our product offerings and value proposition can be accessed on our website: https://www.flexiloans.com/ Why join us? A six-times certified ‘Great Place to work’ workplace, at FlexiLoans you will be working with top tier talent from diverse backgrounds hungry to make a dent in the MSME universe. We believe in people owning what you do and providing support to folks for making decisions (sometimes even wrong decisions)



all the while learning and growing with the organization. FlexiLoans is your front row seat to the MSME Fintech revolution in India The role in a gist: As FlexiLoans enters the next orbit of growth, we are looking for people with the passion and hunger to make a dent in the MSME ecosystem. In this role you will be seeking an Information Security Governance Specialist with 3 years of experience in ISO 27001:2022, regulatory security guidelines, and data privacy laws. Sounds like you? Read more on what we are looking for in the role. What you will work on: Governance, Risk & Compliance:
• Develop, implement, and maintain information security policies, standards, and procedures in compliance with ISO 27001:2022 and industry best practices
• Manage Information Security Management System (ISMS) compliance, including conducting risk assessments, audits, and continuous improvements
• Ensure compliance with Indian banking and insurance regulations, such as RBI MD Cyber Security Framework, IRDAI Information and Cyber Security Guidelines, and Cyber Security and Resilience Framework
• Support Third-Party Risk Management (TPRM) activities by conducting vendor risk assessments, evaluating third-party security controls, and ensuring compliance with contractual security requirements
• Monitor and enforce data privacy policies in alignment with the Digital Personal Data Protection Act (DPDPA), 2023
• Collaborate with legal, risk, and compliance teams to address data privacy, security governance, and regulatory requirements
• Conduct internal security audits and assist in external audits to ensure compliance with security controls and regulatory mandates




• Develop and conduct awareness training programs on data protection, information security, and regulatory compliance
• Track and report on security governance, compliance status, audit findings, and risk mitigation plans to the top Management
• Stay updated with emerging security threats, regulatory changes, and best practices in cybersecurity, data privacy, and third-party risk management
• Maintain regulatory compliance dashboards and provide periodic reports to top management Security Awareness & Training:
• Conduct organization-wide Information Security Awareness Training, including onboarding sessions
• Plan and execute phishing, vishing, and smishing simulations to enhance cyber threat awareness
• Develop and execute awareness campaigns focusing on regulatory compliance and data protection
• Provide guidance to employees on incident reporting, risk mitigation, and compliance best practices Qualification and

Experience:
• Bachelor’s/Master’s degree in Information Technology, Computer Science or a related field
• 3+ years of experience in Information Security, Governance, Risk, and Compliance (GRC)
• Experience with Indian regulatory frameworks, including RBI MD Cyber Security Framework, IRDAI
• Information and Cyber Security Guidelines
• Experience in Third-Party Risk Management (TPRM), including vendor risk assessments and third-party security control evaluations
• Familiarity with risk assessment methodologies, security audits, and regulatory reporting
• Experience in third-party risk assessments, policy enforcement, and security awareness programs
• Hands-on experience with ISMS tools and governance frameworks
• Solid analytical, communication, and stakeholder management skills Certifications (Mandatory & Preferred):
• Mandatory: ISO 27001: 2022 Lead Auditor, Certified Ethical Hacker (CEH)
• Preferred: CISA, CISM, CRISC, CISSP or other relevant GRC certifications

📌 Assistant Manager (Mumbai)
🏢 FlexiLoans
📍 Mumbai