AVP - Information Security Governance & Risk
Northern Arc Capital · Bengaluru · onsite · Posted 73d ago
About a minute. You'll make an account on the way through.
About this role
Responsibilities:
- Review and update the information asset register in accordance with RBI, SEBI, IRDAI, UIDAI, IT Outsourcing, Data Localization, and ISO 27001:2013 requirements.
- Responsible for managing, tracking, updating, and monitoring all regulatory requirements.
- Review the classification levels of data, maintaining a risk register and tracking.
- Create and manage the KRI matrix and thresholds as per compliance, technology, policy, and process.
- Conduct data privacy or PII reviews within the department for PII protection for customers and employees.
- Conduct policy and process risk assessment of vendors while onboarding, evaluating, and monitoring and maintaining the same.
- Assist in IT security product and services risk assessment during evaluation and procurement.
- Track the annual review and changes to all policies and procedures, and draft and update/consolidate policy documents as needed.
- Assist in preparing decks/updates for committee meetings and other management review decks.
- Review the reports and alerts and be sure to close with service groups.
- Access Control Reviews for cloud, application, and infrastructure.
- Comprehensive risk assessment and control testing to be carried out annually and sustained.
- Assist in conducting the various simulations and campaigns for awareness and maintain measures to measure the effectiveness
- Assist in information security project implementation.
- Conduct access control, change management, and other process-level reviews.
- Timely escalation to the right stakeholder if any deliverable is at risk. Working closely with IT and other business functions of the organization for IS assessments and various risk review activities.
Requirements:
- ISMS implementation, policy, and procedure.
- Risk analysis and assessments.
- Conceptual knowledge of infrastructure technology and services, e. g., server infrastructure, development, firewalls, NAC, routers, etc.
- Proactive and able to handle independently with business functions.
- Understanding of business processes across all functions.
- 8+ years of experience in ISMS and ISO 27001 7 CISA, and ISO 27001 Certification.
Sourced from instahyre
Skills
About Northern Arc Capital
Northern Arc Capital
NBFC
1.1k+
employees
2009
17 years old
Chennai, Tamil Nadu
India
About
Every institution has a starting point. For Northern Arc Capital, that journey began in 1989 in Madras (now Chennai) as Highland Leasing & Finance Private Limited.
Over the years, the company underwent a significant transformation. Following its acquisition by IFMR Trust in 2008, it became IFMR Capital Finance Private Limited. In 2018, as part of a strategic rebranding, it was renamed Northern Arc Capital Limited reflecting its evolution into a forward-looking financial services platform.
Northern Arc Capital is a diversified financial services platform dedicated to meeting the credit needs of underserved households and businesses across India. Operating at the intersection of lending, investments, and technology, the company has built a model designed to enable efficient and scalable credit delivery.
This model is anchored in a dual-channel approach:
- Direct-to-Customer (D2C) lending across core sectors such as MSMEs, consumer finance, and rural finance
- Credit Solutions for Originator Partners, including fund management, structured debt placements, intermediate retail lending, and SaaS offerings
Together, these channels enable Northern Arc to address critical credit gaps with a focus on inclusion, scale, and sustainability.
The impact of this approach is reflected in the company’s reach and ecosystem.
Since 2009, Northern Arc has facilitated over INR 2.2 trillion in financing, reaching more than 130 million lives across 28 states, 7 union territories, and 680 districts.
Its wide distribution network includes 360+ branches, 50+ digital and retail lending partners, 350 originator partners, and 1,300+ investors, making Northern Arc one of the most extensive players in India’s retail credit ecosystem.
Over time, the company has strengthened its capital base and investor participation. Alongside other marquee investors, institutions such as IFC have contributed to its growth journey.
FY 2024–25 marked a landmark year in Northern Arc’s journey. The company successfully completed its Initial Public Offering in September 2024, raising INR 777 crore (including INR 500 crore of primary capital). These milestones further strengthen its capital base and position the company for the next phase of growth.
Industries
Employee ratings
210 reviews
Culture
3.4
Career growth
3.2
Work-life
3.7
Employees rate it well for
Find them on