Grc Consultant

Financial Software Systems(FSS); Chennai District; On-site; INR 600,000 - 900,000; Full time

Job summary

Financial Software Systems in Chennai is seeking an Information Security GRC Specialist (3–6 years) to strengthen governance, risk, and compliance programs in a fintech/BFSI/cloud environment.

You will lead ISO/IEC 27001 implementation and audits, drive SOC 2 Type II readiness, conduct risk assessments, coordinate audits, and help develop security policies and secure SDLC governance. The role also involves supporting regulatory assessments and awareness programs.

Qualifications

• 3–6 years in Information Security, GRC, or Risk & Compliance roles.
• Hands-on exposure to ISO/IEC 27001 implementation and audits.
• Practical experience in PCI DSS and SOC 2 Type II compliance.
• Strong knowledge of risk assessment methodologies, audit processes, and regulatory compliance.

Responsibilities

• Implement and maintain PCI DSS and support ISO/IEC 27001 ISMS compliance
• Drive SOC 2 Type II readiness and audits
• Conduct risk assessments, maintain risk register, and support risk treatment activities
• Coordinate internal/external audits, customer due diligence, and regulatory assessments
• Develop and maintain security policies, standards, and procedures
• Support secure SDLC governance, vulnerability management, third-party reviews, and exception handling
• Deliver security awareness programs and ensure continuous compliance monitoring

Skills

Information Security

GRC

Risk & Compliance

ISO/IEC 27001 implementation

ISO/IEC 27001 audits

PCI DSS

SOC 2 Type II

Risk assessment methodologies

Audit processes

Regulatory compliance

Job description

FSS is Hiring: Information Security GRC Professional (36 Years)

Location: Chennai

Full-time Role

Role Overview:

We are seeking an experienced Information Security GRC Specialist (3–6 years) to strengthen our governance, risk, and compliance programs.

Key Responsibilities:

• Implement and maintain PCI DSS and support ISO/IEC 27001 ISMS compliance
• Drive SOC 2 Type II readiness and audits
• Conduct risk assessments, maintain risk register, and support risk treatment activities
• Coordinate internal/external audits, customer due diligence, and regulatory assessments
• Develop and maintain security policies, standards, and procedures
• Support secure SDLC governance, vulnerability management, thirdparty reviews, and exception handling
• Deliver security awareness programs and ensure continuous compliance monitoring

Required Skills & Experience:

• 3–6 years in Information Security, GRC, or Risk & Compliance roles
• Handson exposure to ISO/IEC 27001 implementation and audits
• Practical experience in PCI DSS and SOC 2 Type II compliance
• Strong knowledge of risk assessment methodologies, audit processes, and regulatory compliance
• Experience in fintech, BFSI, SaaS, or cloud environments preferred
• ISO/IEC 27001 Lead Implementer/Lead Auditor certification preferred