IT GRC - NBFC - Munbai

AimsHR; Mumbai; On-site; INR 730,000 - 1,100,000; Full time

Job summary

AimsHR in Mumbai is seeking a dedicated professional to support Information Security, Cybersecurity Governance, Risk Management, and Technology Compliance activities. The role involves monitoring security controls, maintaining risk and compliance registers, coordinating audit evidence, and tracking remediation actions.

The candidate will contribute to DLP initiatives, support incident triage, and assist in control testing.

Qualifications

• Experience in information security, governance, risk and compliance.
• Familiarity with DLP, audit evidence collection and control testing.
• Strong documentation and policy-maintenance skills.

Responsibilities

• Support the implementation, operation, and review of information security controls.
• Maintain risk registers, control documentation, and compliance records.
• Coordinate audit evidence collection and remediation tracking.
• Support DLP initiatives and data protection activities.
• Track vulnerabilities, audit observations, and risk remediation until closure.
• Assist with incident triage, evidence preservation, and post-incident follow-up.
• Prepare security MIS, risk reports, and governance dashboards.
• Maintain security policies, standards, and control documentation.

Skills

Information Security

Cybersecurity Governance

GRC

IT Risk Management

Data Loss Prevention

Audit Evidence Management

Regulatory Compliance

Security Policies

MIS Reporting

Vendor Coordination

Job description

Job Summary:

We are looking for a professional to support Information Security, Cybersecurity Governance, Risk Management, and Technology Compliance activities. The role involves monitoring security controls, maintaining risk and compliance registers, coordinating audit evidence, tracking remediation actions, supporting Data Loss Prevention (DLP) initiatives, and preparing security governance reports.

The candidate will work closely with Technology, Risk, Compliance, Internal Audit, and external vendors to strengthen information security controls and ensure adherence to applicable policies, standards, and regulatory requirements.

Key Responsibilities:

• Support the implementation, operation, and review of information security and cybersecurity controls.
• Maintain IT risk registers, control documentation, compliance records, audit trackers, and remediation logs.
• Coordinate the collection, validation, and maintenance of audit evidence and regulatory documentation.
• Support Data Loss Prevention (DLP), data protection, and information security initiatives.
• Track security vulnerabilities, audit observations, control gaps, and risk remediation activities until closure.
• Assist with security incident triage, evidence preservation, containment coordination, and post-incident follow-up.
• Coordinate with Technology, Risk, Compliance, Internal Audit, and external vendors on security and compliance requirements.
• Prepare security MIS, risk reports, compliance updates, and governance dashboards.
• Maintain information security policies, standards, procedures, and control documentation.
• Support security awareness initiatives and periodic control testing.
• Escalate significant security incidents, high-risk control gaps, and overdue remediation actions.

Key Skills:

• Information Security
• Cybersecurity Governance, Risk & Compliance (GRC)
• IT Risk Management
• Technology Risk & Compliance
• Information Security Controls
• IT Audit and Audit Evidence Management
• Risk Assessment and Remediation Tracking
• Data Loss Prevention (DLP)
• Security Incident Management Support
• Regulatory Compliance
• Security Policies and Documentation
• MIS Reporting and Stakeholder Coordination