Specialist – Governance Risk Compliance

Cubical Operations LLP; Mumbai, Pune District, Gurugram District, Bengaluru; Hybrid; INR 800,000 - 1,200,000; Full time

Job summary

A consulting firm is seeking a GRC Specialist to manage Third-Party Risk Management and ensure PCI DSS compliance. The candidate should have at least 4 years of experience, strong analytical skills, and relevant certifications such as CISA or CRISC are a plus. This position involves developing frameworks, conducting audits, and collaborating with stakeholders to ensure comprehensive compliance and risk mitigation strategies.

Qualifications

• Proven experience in Third-Party Risk Management (TPRM) and PCI DSS compliance.
• In-depth knowledge of GRC principles, frameworks, and best practices.
• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work effectively in a dynamic, fast-paced environment.
• Relevant certifications such as CISA, CRISC, or PCI QSA are a plus.

Responsibilities

• Develop and implement comprehensive TPRM frameworks and strategies.
• Conduct risk assessments of third-party vendors and service providers.
• Monitor and manage third-party risks, ensuring compliance with regulatory requirements.
• Collaborate with stakeholders to mitigate identified risks.
• Lead and manage PCI DSS compliance projects and assessments.
• Develop and maintain PCI DSS documentation.
• Conduct internal PCI DSS audits and work with external auditors.
• Provide guidance and support to teams to address PCI DSS requirements.
• Develop and implement GRC policies and procedures.
• Monitor and report on compliance with regulatory and industry standards.

Skills

Third-Party Risk Management (TPRM)

PCI DSS compliance

GRC principles

Analytical skills

Communication

Stakeholder management

Job description

About the job:

Job Description: GRC Specialist

Location: Mumbai, Pune, Gurgaon, Bangalore

Experience Required: 4+ years

Key Responsibilities:

Third-Party Risk Management (TPRM):

• – Develop and implement comprehensive TPRM frameworks and strategies.
• – Conduct risk assessments of third-party vendors and service providers.
• – Monitor and manage third-party risks, ensuring compliance with regulatory requirements.
• – Collaborate with stakeholders to mitigate identified risks and ensure continuous improvement of TPRM processes.

PCI DSS Compliance:

• – Lead and manage PCI DSS compliance projects and assessments.
• – Develop and maintain PCI DSS documentation, including policies, procedures, and controls.
• – Conduct internal PCI DSS audits and work with external auditors to ensure compliance.
• – Provide guidance and support to teams to address PCI DSS requirements and remediate compliance issues.

Governance, Risk, and Compliance (GRC):

• – Develop and implement GRC policies, procedures, and frameworks.
• – Conduct risk assessments and develop risk mitigation strategies.
• – Monitor and report on compliance with regulatory and industry standards.
• – Provide training and awareness programs on GRC topics to internal teams.

Skills and Qualifications:

• – Proven experience in Third-Party Risk Management (TPRM) and PCI DSS compliance.
• – In-depth knowledge of GRC principles, frameworks, and best practices.
• – Strong analytical and problem-solving skills.
• – Excellent communication and stakeholder management skills.
• – Ability to work effectively in a dynamic, fast-paced environment.
• – Relevant certifications such as CISA, CRISC, or PCI QSA are a plus