Senior Associate Consultant

Anzen Technologies; Navi Mumbai; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

CONFIDENTIAI in Navi Mumbai is seeking a Senior Associate Consultant with 3+ years of experience to lead GRC initiatives across policy, risk, and compliance domains. The role focuses on developing and implementing GRC strategies, defining priorities, and aligning with regulatory requirements.

You will perform risk assessments, manage audits, and ensure compliance with GDPR, HIPAA, PCI DSS, SEBI, RBI, and IRDAI while collaborating with IT, legal, and operations to drive improvements.

Qualifications

• Bachelor’s degree in Information Security, Risk Management, or related field.
• 5+ years in governance, risk, and compliance roles.
• Knowledge of GDPR, HIPAA, PCI DSS, SEBI, RBI, IRDAI.
• Experience with NIST, COBIT, ITIL control frameworks.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• GRC Strategy and Planning: Develop and implement comprehensive GRC strategies, policies, and procedures aligned with organizational goals and objectives.
• Define and prioritize GRC initiatives based on risk assessments, regulatory requirements, and industry best practices.
• Continuously evaluate and update GRC frameworks to adapt to evolving threats and compliance landscapes.
• Risk Management: Conduct risk assessments to identify, analyze, and prioritize risks across the organization. Develop risk mitigation strategies and controls to address identified risks effectively. Monitor and report on risk exposure and mitigation efforts to senior management and stakeholders.
• Compliance Management: Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR, HIPAA, PCI DSS, etc. Monitor changes in regulatory requirements (SEBI, RBI, IRDAI etc) and assess their impact on the organization's compliance posture. Coordinate compliance audits, assessments, and certifications, and remediate any identified issues or deficiencies.
• Audit Management: Plan, coordinate, and oversee internal and external audit activities, including IT audits, compliance audits, and third-party audits. Develop audit plans, programs, and testing procedures to assess the effectiveness of controls and compliance with policies and regulations. Review audit findings, assess control deficiencies, and collaborate with stakeholders to develop and implement remediation plans. Monitor and track the progress of audit remediation efforts and report on the status to senior management and audit committees.
• Policy Development and Enforcement: Develop, review, and update information security policies, standards, and guidelines in alignment with regulatory requirements and industry best practices.
• Establish mechanisms for policy enforcement and monitor adherence to policies across the organization.
• Cross-Functional Collaboration: Collaborate with internal stakeholders, including IT, legal, finance, and operations, to integrate GRC principles into business processes and initiatives. Provide guidance and support to business units on GRC-related matters.
• Training and Awareness: Develop and deliver GRC training programs and awareness campaigns. Foster a culture of compliance and risk awareness throughout the organization.

Skills

GRC experience

Audit methodologies

Risk assessment

Compliance frameworks

Control frameworks

Regulatory knowledge

Analytical skills

Communication skills

Education

Bachelor's degree in Information Security, Risk Management, Business

Master's degree or relevant certifications (CISA, CISSP, CRISC, CISM)

Job description

CONFIDENTIAI

CRA Senior Associate Consultant

Job Title: Senior Associate Consultant

Experience: 3+ years

Employment Type: Full-Time

Key Responsibilities

• GRC Strategy and Planning: Develop and implement comprehensive GRC strategies, policies, and procedures aligned with organizational goals and objectives.


• Define and prioritize GRC initiatives based on risk assessments, regulatory requirements, and industry best practices.


• Continuously evaluate and update GRC frameworks to adapt to evolving threats and compliance landscapes.


• Risk Management: Conduct risk assessments to identify, analyze, and prioritize risks across the organization. Develop risk mitigation strategies and controls to address identified risks effectively. Monitor and report on risk exposure and mitigation efforts to senior management and stakeholders.


• Compliance Management: Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR, HIPAA, PCI DSS, etc. Monitor changes in regulatory requirements (SEBI, RBI, IRDAI etc) and assess their impact on the organization's compliance posture. Coordinate compliance audits, assessments, and certifications, and remediate any identified issues or deficiencies.


• Audit Management: Plan, coordinate, and oversee internal and external audit activities, including IT audits, compliance audits, and third-party audits. Develop audit plans, programs, and testing procedures to assess the effectiveness of controls and compliance with policies and regulations. Review audit findings, assess control deficiencies, and collaborate with stakeholders to develop and implement remediation plans. Monitor and track the progress of audit remediation efforts and report on the status to senior management and audit committees.


• Policy Development and Enforcement: Develop, review, and update information security policies, standards, and guidelines in alignment with regulatory requirements and industry best practices.


• Establish mechanisms for policy enforcement and monitor adherence to policies across the organization.


• Cross-Functional Collaboration: Collaborate with internal stakeholders, including IT, legal, finance, and operations, to integrate GRC principles into business processes and initiatives. Provide guidance and support to business units on GRC-related matters.


• Training and Awareness: Develop and deliver GRC training programs and awareness campaigns. Foster a culture of compliance and risk awareness throughout the organization.

CONFIDENTIAI

Qualifications and Skills

• Bachelor's degree in Information Security, Risk Management, Business Administration, or related field.


• Masters degree or relevant certifications (CISA, CISSP, CRISC, CISM) preferred.


• Minimum of 5 years of experience in governance, risk, and compliance roles.


• Strong understanding of regulatory requirements and industry standards related to information security and data privacy.


• Proficiency in audit methodologies, risk assessment frameworks, compliance frameworks, and control frameworks (NIST, COBIT, ITIL).


• Excellent analytical, problem-solving, and decision-making skills.


• Effective communication and interpersonal skills.


• Proven track record of leading GRC initiatives, conducting audits, and driving process improvements.


• Ability to work independently and manage multiple priorities in a fast-paced environment.