GRC Specialist: Security, Risk & Compliance

ThoughtFocus; Hyderabad City Taluka; Sur place; PKR 1 800 000 - 3 000 000; Plein temps

Résumé du poste

Keka Inc. seeks a hands-on GRC Specialist to support information security governance, risk assessments, and audit activities across BFSI-aligned environments. You will collaborate with security engineering, cloud, and IAM teams to ensure evidence-ready controls and compliant processes.

The role emphasizes documenting controls, maintaining policy hygiene, and driving remediation with clear action plans for leadership. Strong cross-functional communication is essential.

Qualifications

• 6+ years in information security GRC, IT risk, audit, or compliance (hands-on delivery).
• Experience supporting audits and control evidence in enterprise environments.
• BFSI or regulated-industry experience preferred.

Responsabilités

• Support and maintain the information security governance framework, policies, standards, and control library
• Plan and execute security risk assessments
• Track findings, remediation owners, and closure evidence
• Support regulatory and audit engagement (SOC 1/2, ISO 27001, PCI DSS)
• Gather, organize, and quality-check audit and compliance evidence across security, IAM, cloud, and engineering teams
• Maintain risk registers and compliance reporting packs
• Coordinate with DevSecOps, IAM/CIAM, and security operations teams to map controls to GRC obligations
• Contribute to GRC runbooks and process documentation
• Escalate material risk, audit, or compliance issues with recommended actions

Connaissances

GRC

Risk assessment

Audit support

Policy development

Stakeholder coordination

Outils

ServiceNow GRC

Archer

Description du poste

Keka Inc. seeks a hands-on GRC Specialist to support information security governance, risk assessments, and audit activities across BFSI-aligned environments. You will collaborate with security engineering, cloud, and IAM teams to ensure evidence-ready controls and compliant processes.

The role emphasizes documenting controls, maintaining policy hygiene, and driving remediation with clear action plans for leadership. Strong cross-functional communication is essential.