Lead – GRC | Experience: 8+ years

Aujas Networks Pvt. Ltd.; Mumbai Suburban; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A leading technology firm in Mumbai is seeking a compliance and security specialist to oversee technology readiness for audits, manage GRC projects, and ensure adherence to security protocols. The role demands strong communication, multitasking abilities, and a solid understanding of security operations. Join a dynamic team dedicated to maintaining high compliance standards and risk management practices.

Qualifications

• Experience in tracking compliance projects and assessments.
• Ability to coordinate with IT teams and vendors.
• Experience with risk management and audits.

Responsibilities

• Work with Head IT GRC and Security operations on compliance readiness.
• Ensure timely completion of security and GRC projects.
• Prepare for internal and external audits.

Skills

Strong documentation skills

Ability to prioritize and multitask

Understanding of perimeter security operations

Job description

• Work with the Head IT GRC and Security operations to ensure readiness on all technology compliance


• Ensure all security and GRC projects are tracked and completed in time


• Co-ordinate with internal IT team and IT vendors and ensure security readiness


• Carry out periodic compliance assessment of the following processes (but not limited to)
  
  
  
  • Asset management
  
  
  • Access management
  
  
  • Change management
  
  
  • Patch management
  
  
  • Configuration review
  
  
  • Secure code guidelines
  
  
  • Vulnerability management
  
  
  • Vendor management
  
  
  
  


• Prepare the processes, teams, documents for internal and external audits


• Track and remediate all audit observations with corrective and preventive actions


• Ensure compliance to privilege access management process


• Manage and track all Technology related risks for timely closure


• Oversee/Facilitate formal risk analysis and self-assessments program for various systems and processes


• Strong documentation and communications skills


• Ability to prioritize and multitask. Flexibility and adaptability in work approach


• Understanding of perimeter security operations including Firewalls, IDS/IPS, WSG, DDoS etc.

Project(s) Management

• Manage the project to ensure quality deliverables are produced within timelines.


• Project communication is open and documented and relationship with all stakeholders are maintained