GRC Manager/ GRC Lead

Riskpro India Ventures; Mumbai; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading risk management consulting firm in Mumbai is seeking a GRC Manager to establish and oversee Governance, Risk, and Compliance frameworks. The ideal candidate should have 2-3 years of experience in GRC or Compliance roles, a bachelor’s degree in a related field, and relevant certifications. Responsibilities include ensuring compliance with PCI DSS and ISO 27001, conducting audits, and managing risk related to financial transactions. Interested candidates should send their resume along with current and expected salary.

Qualifications

• 2-3 years of experience in GRC, Information Security, or Compliance roles.
• Experience conducting internal audits, risk assessments, and compliance reviews.
• Knowledge of financial regulatory frameworks such as PCI DSS and ISO 27001.

Responsibilities

• Establish and oversee Governance, Risk, and Compliance frameworks.
• Ensure compliance with relevant regulations and manage financial transaction risks.
• Conduct gap assessments and audits to verify compliance.

Skills

Risk management

Stakeholder management

Problem-solving

Analytical skills

Education

Bachelor's degree in information technology or related field

Certifications: CISA, CISM, CRISC, CISSP

Tools

GRC tools

NIST

COSO

COBIT

Job description

Job Description

• 2-3 years of experience in GRC, Information Security, or Compliance roles, preferably in a FinTech or financial services environment.
• Strong knowledge of PCI DSS, ISO 27001, SOC 2, GDPR, RBI guidelines, and other financial regulatory frameworks.
• Experience conducting internal audits, risk assessments, and compliance reviews.
• Familiarity with GRC tools and risk management frameworks (e.g., NIST, COSO, COBIT).
• Strong analytical, problem-solving, and stakeholder management skills.

Educational & Professional Credentials

• Bachelor’s degree in information technology, Computer Science, i.e. MSc Computer Science, B. Tech or Equivalent technical background.
• Certifications: CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, PCI ISA/QSA.
• Experience working with payment systems, digital banking, remittances, or forex operations.
• Knowledge of third-party risk management (TPRM) and security governance models.

Required Knowledge & Skills

Role Overview

The GRC Manager will be responsible for establishing, implementing, and overseeing Governance, Risk, and Compliance frameworks within the company. This role ensures compliance with PCI DSS, ISO 27001, and other regulatory requirements, while also managing risks related to financial transactions, data security, and operational processes in a FinTech environment.

Governance & Compliance

• Implement and maintain PCI DSS, ISO 27001, and other applicable compliance frameworks.
• Develop and enforce policies, procedures, and controls to meet regulatory and industry standards.
• Conduct periodic gap assessments and audits to ensure compliance with relevant security and privacy regulations (e.g., RBI guidelines, GDPR, etc.).
• Collaborate with internal teams (Security, IT, Legal, Product) to ensure compliance is embedded in all business processes.
• Stay updated on regulatory changes and proactively implement necessary compliance measures.
• Develop and manage the Enterprise Risk Management (ERM) framework, identifying, assessing, and mitigating risks related to cybersecurity, operations, and third-party vendors.
• Conduct risk assessments and business impact analyses to identify vulnerabilities in processes and technology.
• Oversee third-party/vendor risk management to ensure compliance with security and privacy requirements.
• Monitor key risk indicators (KRIs) and report findings to senior management.

Audit & Incident Management

• Lead internal and external audits related to PCI DSS and ISO 27001 compliance.
• Coordinate with auditors and regulators to address compliance gaps and implement corrective actions.
• Establish and oversee incident response protocols to ensure swift action in case of security breaches or compliance violations.
• Conduct root cause analysis (RCA) for compliance issues and implement continuous improvement measures.
• Conduct employee training programs on risk, compliance, and security best practices.
• Promote a strong compliance culture within the organization through regular awareness campaigns.

Next Steps

If you are interested in this role, please email your latest profile/ resume, your current salary and expected salary to [e-mail]

About Riskpro

Riskpro India is a specialized Risk Management consulting company. It is managed by experienced professionals with experiences across various industries. With offices in Mumbai, Delhi, Bangalore, Chennai, Pune and Kolkata, we are one of the fastest growing risk consulting firms in India. We are since 12+ years in business, serviced 850+ clients in 7+ cities with 500+ cities associate representation, 90+ team members with 10 Strategic partners.

Our 5 Business Verticals

• Risk Advisory – We conduct Risk based internal audits, SOPs, ERM, legal compliance audits, IFC, Risk Library, etc.
• GRC Technology – We provide software for Compliance management, Internal audit, Risk management, Contract management, Vendor Risk Management, etc.
• GRC Trainings – We conduct in-person/online trainings on topics like ERM, Risk assessment, AML, Fraud risk, Information security among others.
• GRC Recruitment – We provide full/part time internal auditors, Virtual risk managers and Independent directors for corporates.

Why Riskpro

Riskpro provides a platform for people to associate with us. When you associate with Riskpro, you can build your own set of clients and leverage the brand to get clients, business for yourself. It is one of its kind business model that offers you the flexibility and freedom of an independent professional, as well as the corporate and brand backing of an established firm.