Grc Analyst

Infoshare soft; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Infoshare soft in Pune, Maharashtra, seeks an experienced GRC professional to join our governance, risk and compliance team for building robust frameworks.

You will collaborate with stakeholders, assess risks, monitor KPIs, and train staff on GRC best practices to ensure PCI DSS, HIPAA, GDPR and ISO 27001 alignment.

Qualifications

• 4–6 years of GRC experience, preferably BFSI.
• CISA/CRISC/ISO 27001 Lead Auditor certifications or equivalent.
• Familiar with PCI DSS, HIPAA, GDPR.

Responsibilities

• Develop and implement GRC frameworks, policies, and procedures to mitigate identified risks.
• Collaborate with stakeholders to ensure compliance with regulatory requirements such as PCI DSS, HIPAA, GDPR, ISO 27001 Lead Auditor certification.
• Monitor and report on KPIs related to governance, risk management, and compliance.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Provide training on GRC best practices and ensure awareness among employees through regular communication.

Skills

GRC expertise

Regulatory compliance

Risk assessment

Stakeholder collaboration

Training & awareness

Tools

NIST CSF

Controls Mapping Matrix

ISO 27001 Lead Auditor

PCI DSS knowledge

Job description

Roles and Responsibilities

• Develop and implement GRC frameworks, policies, and procedures to mitigate identified risks.
• Collaborate with stakeholders to ensure compliance with regulatory requirements such as PCI DSS, HIPAA, GDPR, ISO 27001 Lead Auditor certification.
• Monitor and report on key performance indicators (KPIs) related to governance, risk management, and compliance.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Provide training on GRC best practices and ensure awareness among employees through regular communication.

Desired Candidate Profile

• 4-6 years of experience in Governance Risk & Compliance (GRC), preferably in BFSI industry.
• Strong understanding of CISA/CRISC/ISO 27001 Lead Auditor certifications or equivalent experience.
• Experience with auditing tools like NIST Cybersecurity Framework (CSF) or Controls Mapping Matrix (CMM).
• Familiarity with relevant regulations such as PCI DSS, HIPAA, GDPR.