Shared Services – Information Security, GRC & Technology Compliance

AimsHR; Mumbai; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

AimsHR is seeking a professional to support Information Security, Cybersecurity Governance, Risk Management, and Technology Compliance activities in Mumbai. You will monitor controls, maintain risk and compliance registers, coordinate audit evidence and remediation actions, and support DLP initiatives and governance reporting.

You will work with Technology, Risk, Compliance, Internal Audit, and external vendors to strengthen security controls and ensure adherence to policies and regulatory

Qualifications

• Experience supporting information security, governance, risk and compliance activities.
• Coordinate audit evidence collection and remediation tracking.
• Support DLP initiatives and security governance reporting.

Responsibilities

• Support the implementation, operation, and review of information security and cybersecurity controls.
• Maintain IT risk registers, control documentation, compliance records, audit trackers, and remediation logs.
• Coordinate the collection, validation, and maintenance of audit evidence and regulatory documentation.
• Support DLP, data protection, and information security initiatives.
• Track vulnerabilities, audit observations, control gaps and remediation activities.
• Assist with incident triage, evidence preservation and post-incident follow-up.
• Coordinate with Technology, Risk, Compliance, Internal Audit and vendors on security requirements.
• Prepare security MIS, risk reports, compliance updates and governance dashboards.
• Maintain information security policies, standards and procedures.
• Support security awareness and periodic control testing.
• Escalate significant incidents and overdue remediation actions.

Skills

Information Security

GRC

IT Risk Management

Technology Risk & Compliance

Information Security Controls

IT Audit and Audit Evidence Management

Risk Assessment and Remediation

Data Loss Prevention

Security Incident Management

Regulatory Compliance

Security Policies

MIS Reporting

Job description

Job Summary:

We are looking for a professional to support Information Security, Cybersecurity Governance, Risk Management, and Technology Compliance activities. The role involves monitoring security controls, maintaining risk and compliance registers, coordinating audit evidence, tracking remediation actions, supporting Data Loss Prevention (DLP) initiatives, and preparing security governance reports.

The candidate will work closely with Technology, Risk, Compliance, Internal Audit, and external vendors to strengthen information security controls and ensure adherence to applicable policies, standards, and regulatory requirements.

Key Responsibilities:

• Support the implementation, operation, and review of information security and cybersecurity controls.
• Maintain IT risk registers, control documentation, compliance records, audit trackers, and remediation logs.
• Coordinate the collection, validation, and maintenance of audit evidence and regulatory documentation.
• Support Data Loss Prevention (DLP), data protection, and information security initiatives.
• Track security vulnerabilities, audit observations, control gaps, and risk remediation activities until closure.
• Assist with security incident triage, evidence preservation, containment coordination, and post-incident follow-up.
• Coordinate with Technology, Risk, Compliance, Internal Audit, and external vendors on security and compliance requirements.
• Prepare security MIS, risk reports, compliance updates, and governance dashboards.
• Maintain information security policies, standards, procedures, and control documentation.
• Support security awareness initiatives and periodic control testing.
• Escalate significant security incidents, high-risk control gaps, and overdue remediation actions.

Key Skills:

• Information Security
• Cybersecurity Governance, Risk & Compliance (GRC)
• IT Risk Management
• Technology Risk & Compliance
• Information Security Controls
• IT Audit and Audit Evidence Management
• Risk Assessment and Remediation Tracking
• Data Loss Prevention (DLP)
• Security Incident Management Support
• Regulatory Compliance
• Security Policies and Documentation
• MIS Reporting and Stakeholder Coordination