Role: Governance, Risk and Compliance Anayst
Location: Aundh, Pune, Maharashtra
About the company
Credit cards haven't changed much for over half a century so our team of seasoned bankers, technologists, and designers set out to redefine the credit card for you - the consumer.
The result is OneCard - a credit card reimagined for the mobile generation.
OneCard is India's best metal credit card built with full-stack tech.
It is backed by the principles of simplicity, transparency, and giving back control to the user.
Key Responsibilities:
- Policy and Procedure Management: Assist in the regular review, development, and updating of information security policies, procedures, and standards to ensure they remain current with industry best practices and regulatory requirements.
- Compliance Monitoring: Support continuous compliance monitoring activities across different frameworks.
This includes tracking and reporting on Key Performance Indicators (KPIs) to measure the effectiveness of security controls.
- Vulnerability Management: Collaborate with technical teams to track the remediation and closure of identified vulnerabilities, ensuring that they are addressed within agreed-upon timelines.
- Vendor Risk Management: Participate in the third-party risk management program by conducting security due diligence and risk assessments of new and existing vendors to ensure they meet our security standards.
- Reporting: Assist in preparing reports and dashboards for management on the status of GRC initiatives, risk posture, and compliance levels.
- Audit Support: Provide support during internal and external audits by helping to gather evidence and documentation.
Experience:
0-2 years of relevant experience in a GRC, information security, or IT audit role with strong foundational knowledge of information security principles and practices.
Skills and Qualifications:
- A Bachelor’s degree in Information Technology, Cyber Security, Computer Science, or a related field is required.
- Framework Proficiency: Must have a strong understanding of security and compliance frameworks such as ISO 27001, SOC 2, and PCI DSS.
- Analytical & Problem-Solving Skills: Excellent analytical skills with a keen eye for detail and a creative approach to problem-solving.
- Ownership and Initiative: A proactive and self-motivated individual with a strong sense of ownership and responsibility.
Capable of working independently on assigned tasks and making well-reasoned decisions.
- Communication: Strong written and verbal communication skills, with the ability to collaborate effectively with cross-functional teams.
- Certifications: Any additional cybersecurity or GRC-related certifications (e.g., CompTIA Security+, ISO 27001 LA/LI) are an advantage but not mandatory.
- Nice to have - Regulatory Knowledge: Familiarity with RBI regulations and guidelines for Fintech companies in India is highly desirable.