Grc Analyst

Governance & Compliance:

• Implement and maintain ISMS per ISO 27001 and RBI cyber security framework for NBFC.
• Develop security policies and ensure alignment with RBI IT governance directions.
• Track compliance with CERT-In directives and DPDP Act requirements; coordinate regulatory audits.

Risk & Assessments:

• Conduct IT risk assessments and maintain Risk Register, track remediation.
• Perform gap assessments against ISO 27001, RBI guidelines, and DPDP requirements.
• Assess third-party/vendor security and compliance posture.

Incident & Data Protection:

• Support incident response; ensure CERT-In notification compliance and data breach management.
• Participate in RCA and security exception tracking.

Reporting & Documentation:

• Prepare audit reports, compliance dashboards, and board-level security metrics.
• Document SOPs, policies, and management review reports aligned with regulatory requirements.