Grc Analyst

Fusion Finance; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Fusion Finance is strengthening its governance and compliance function in India. The role focuses on implementing and maintaining ISMS aligned with ISO 27001 and RBI cyber security directives for NBFCs, while developing security policies and coordinating regulatory audits.

You will track CERT-In directives, DPDP requirements, and produce board-level security metrics and SOP documentation to ensure ongoing regulatory alignment.

Responsibilities

• Implement and maintain ISMS per ISO 27001 and RBI cyber security framework for NBFC.
• Develop security policies and ensure alignment with RBI IT governance directions.
• Track compliance with CERT-In directives and DPDP Act requirements; coordinate regulatory audits.
• Prepare audit reports, compliance dashboards, and board-level security metrics.

Job description

Governance & Compliance:

• Implement and maintain ISMS per ISO 27001 and RBI cyber security framework for NBFC.
• Develop security policies and ensure alignment with RBI IT governance directions.
• Track compliance with CERT-In directives and DPDP Act requirements; coordinate regulatory audits.

Risk & Assessments:

• Conduct IT risk assessments and maintain Risk Register, track remediation.
• Perform gap assessments against ISO 27001, RBI guidelines, and DPDP requirements.
• Assess third-party/vendor security and compliance posture.

Incident & Data Protection:

• Support incident response; ensure CERT-In notification compliance and data breach management.
• Participate in RCA and security exception tracking.

Reporting & Documentation:

• Prepare audit reports, compliance dashboards, and board-level security metrics.
• Document SOPs, policies, and management review reports aligned with regulatory requirements.