GRC Specialist

Krazy Bee Services; Bengaluru; On-site; INR 180,000 - 320,000; Full time

Job summary

Krazy Bee Services in Bengaluru seeks an InfoSec GRC Specialist to act as a strategic architect of digital trust, translating regulatory mandates into secure architecture and reporting risk to leadership.

The role bridges engineering and executive teams, embedding secure development practices and privacy frameworks to safeguard operations, partnerships, and brand reputation.

Qualifications

• Bachelor’s or Master’s degree in Engineering, Computer Science, or related field.
• Strong understanding of cloud environments (AWS/GCP).
• Knowledge of Data Privacy Frameworks (e.g., Digital Personal Data Protection Act).
• Excellent analytical and communication skills to work with stakeholders.

Responsibilities

• Ensure regulatory alignment with RBI, UIDAI, and DLG.
• Design and update information security frameworks, policies, and procedures.
• Coordinate security evaluations, VAPT, and statutory audits.
• Respond to external security assessment questionnaires to maintain trust.
• Strengthen security across AWS and GCP cloud ecosystems.
• Establish and report security KPIs and KGIs to executives.
• Flag and escalate security anomalies and policy violations.
• Develop and manage enterprise-wide InfoSec training and phishing simulations.
• Monitor global security trends and regulatory updates to mitigate gaps.

Skills

Analytical skills

Communication skills

Education

Bachelor's or Master's degree in Engineering, Computer Science, or related field

Job description

About the role:

The InfoSec GRC Specialist serves as the strategic architect of the Krazybees digital trust, operating at the critical intersection of advanced cloud engineering, corporate governance, and complex financial regulation. Rather than merely reacting to technical threats, this role

acts as a vital bridge between engineering teams and executive leadership, translating rigorous regulatory mandates into actionable, secure architecture while articulating risk profiles to stakeholders. In the high velocity FinTech landscape, where robust compliance is

a powerful driver of business growth, this position proactively shapes the enterprise defensive posture from embedding automated secure software development protocols to enforcing global data privacy framework. This is to ultimately safeguard the company's operational integrity, institutional partnerships, and brand reputation.

Key Responsibilities

Regulatory & Policy Compliance

• Ensure continuous alignment with major financial and data regulators, including RBI, UIDAI, and DLG.
• Design, implement, and update robust information security frameworks, policies, and procedures rooted in industry benchmarks (e.g., ISO 27001).
• Coordinate and facilitate internal and external security evaluations, vulnerability assessments, penetration testing (VAPT), and statutory audits.
• Evaluate and respond to external security assessment questionnaires to maintain partner and vendor trust.
• Oversee and strengthen security postures across cloud ecosystems, specifically AWS and GCP.
• Establish, monitor, and report on security performance indicators (KPIs/KGIs) via executive dashboards or GRC tools.
• Promptly flag and escalation security anomalies, policy deviations, and violations.
• Design, execute, and manage enterprise-wide InfoSec training modules and regular phishing simulation exercises.
• Monitor global security trends, legislative updates, and evolving threat landscapes to proactively mitigate organizational gaps.

Qualifications & Core Skills

• Bachelors or Masters degree in Engineering, Computer Science, or a closely related technical field.
• Strong foundational understanding of cloud environments (AWS/GCP) and modern Data Privacy Frameworks (such as Digital Personal Data protection Act).
• Exceptional analytical capabilities alongside strong communication skills to collaborate effectively with both internal stakeholders and external clients.
• Professional security certifications such as CISA, or ISO 27001 Lead Auditor are highly advantageous but not mandatory.