PUNE · FULLTIME
GRC Executive (Internal Compliance & Client Services)
Devangles Software
Pune · onsite · Posted 4d ago
Sourced from
Undisclosed2–4 yrsfulltimePune
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
Responsibilities
Requirements
Job Details
Additional Responsibilities
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
DevAngles is looking for a hands-on GRC Executive to support the execution of the company s internal governance, risk, information security, privacy, compliance, audit-readiness, and responsible AI initiatives, as well as customer-facing GRC and compliance services. You will work directly with the Head of GRC PMO to support DevAngles ISO/IEC 27001 Information Security Management System, ISO/IEC 42001 Artificial Intelligence Management System, internal risk and control processes, customer security assessments, and external consulting engagements. This is an individual-contributor execution role. The Head of GRC PMO will retain responsibility for strategy, framework interpretation, risk acceptance, material decisions, and executive escalation. You will be responsible for carrying out assigned activities, maintaining documentation and evidence, following up with stakeholders, identifying gaps, and driving agreed actions through to closure. The role may support customers preparing for certification, but it will not perform or represent formal certification audits on behalf of an accredited certification body. The ideal candidate is organized, dependable, detail-oriented, and comfortable doing the practical work required to make a compliance program operational and auditable. You should be able to identify gaps, collect and assess evidence, coordinate stakeholders, prepare clear documentation, and follow agreed actions through to evidence-based closure while escalating material decisions and exceptions to the appropriate authority.
Responsibilities
- ISO 27001 ISO 42001 Implementation: Support the implementation, maintenance, and continual improvement of DevAngles Information Security Management System and Artificial Intelligence Management System.
- GRC Documentation: Draft and maintain policies, procedures, standards, control documentation, Statements of Applicability, risk-treatment records, registers, and supporting evidence.
- Risk Control Management: Maintain risk registers, compliance trackers, control records, audit action plans, exception logs, corrective-action trackers, and management-reporting inputs.
- Evidence Coordination: Work with control owners across engineering, delivery, HR, operations, legal, and other functions to collect, review, organize, and track compliance evidence.
- Control Monitoring: Identify weak, incomplete, overdue, or unsupported controls and escalate evidence gaps, exceptions, delays, and dependencies to the Head of GRC PMO.
- Audit Readiness: Support internal audits, management reviews, customer assessments, certification-readiness activities, corrective actions, and evidence-based closure of audit findings.
- Security Privacy Assessments: Assist with customer security questionnaires, due-diligence requests, privacy assessments, vendor-risk reviews, and information-security evaluations.
- Contractual Compliance Tracking: Identify and track contractual security, privacy, audit, and compliance obligations for review and decision by the appropriate authorized owner.
- Operational Resilience: Support business impact assessments, BCP/DR documentation, testing activities, incident-governance records, follow-up actions, and continual-improvement activities.
- Customer GRC Services: Support customer engagements involving ISO 27001, ISO 42001, SOC 2, privacy, vendor risk, cyber-risk, security governance, responsible AI, and related compliance requirements.
- Gap Readiness Assessments: Conduct structured gap assessments and readiness reviews under appropriate supervision, review customer documentation and evidence, and document findings clearly.
- Remediation Planning: Prepare practical remediation plans identifying the required action, priority, owner, dependency, target date, and expected evidence of completion.
- Customer Coordination: Coordinate evidence collection, control-owner interviews, action tracking, remediation follow-ups, and preparation for internal, readiness, and certification audits.
- Training Awareness: Develop and deliver internal and customer-facing training or awareness sessions covering security, privacy, risk, compliance, responsible AI, and related topics.
- Consulting Pre-Sales Support: Participate in customer calls, workshops, proposals, demonstrations, assessments, and solution discussions when required.
- Business Translation: Convert technical, contractual, regulatory, or framework requirements into clear and practical actions for business and technology teams.
- Reporting Escalation: Prepare dashboards, status reports, meeting minutes, evidence indexes, findings, corrective-action summaries, and executive updates.
Requirements
- Experience: 2-4 years of hands-on experience in information-security GRC, IT audit, technology risk, cybersecurity compliance, ISO implementation, or a closely related role.
- Implementation Exposure: Meaningful hands-on contribution to at least one ISO 27001, SOC 2, or comparable compliance implementation, assessment, or audit-readiness cycle.
- Framework Knowledge: Working knowledge of ISO/IEC 27001 and fundamental information-security governance, risk, control, audit, and compliance concepts.
- Evidence-Based Approach: Ability to collect, organize, review, and assess evidence instead of relying solely on policies, verbal confirmation, or unsupported statements.
- Documentation: Experience drafting or maintaining policies, procedures, standards, risk registers, audit findings, corrective actions, control descriptions, or compliance records.
- Risk Audit Understanding: Ability to distinguish between a risk, control gap, audit finding, observation, corrective action, exception, and recommendation.
- Control Implementation: Ability to evaluate whether a documented control has been implemented, assigned, evidenced, monitored, and followed consistently.
- Communication: Strong written and spoken English, including the ability to prepare structured reports, explain findings clearly, and communicate with global customers and senior stakeholders.
- Customer-Facing Capability: Confidence to participate in customer interviews, assessment meetings, workshops, training sessions, and compliance discussions.
- Organization Follow-Through: Ability to manage multiple trackers, actions, evidence requests, deadlines, and customer commitments without losing follow-up.
- Stakeholder Coordination: Comfortable working with engineering, delivery, HR, operations, legal, vendors, customers, and senior leadership.
- Technical Awareness: Basic understanding of cloud services, software-development environments, identity and access management, vulnerability management, incident management, backup and recovery, and common information-security controls.
- Tools: Strong working knowledge of Microsoft Office or Google Workspace, particularly documents, spreadsheets, presentations, and evidence repositories.
- Learning Agility: Willingness and ability to learn unfamiliar frameworks, regulations, technologies, and customer requirements quickly.
- Execution Discipline: Ability to follow agreed direction, complete assigned work independently, and promptly escalate evidence gaps, conflicting requirements, control failures, delays, and material risks.
- Preferred Framework Exposure: Familiarity with ISO/IEC 42001, SOC 2, NIST CSF, privacy requirements, third-party risk management, BCP/DR, security awareness, or AI governance is preferred.
- Preferred Certifications: ISO 27001 Internal Auditor, Lead Implementer, or Lead Auditor training or certification is helpful but not mandatory. Certifications will not substitute for practical knowledge, communication quality, and evidence of hands-on execution.
Job Details
- Location: Pune - five days a week from the office, Monday to Friday.
- Working Hours: Normal working hours are generally within the 10:00 a.m. to 8:00 p.m. office window, including applicable breaks. Some global customer engagements may require an assigned 3:00 p.m. to 12:00 midnight shift or other reasonable customer-overlap hours, communicated in advance.
Additional Responsibilities
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Cyberbackup and recoverycloud servicesgrccontractual complianceauditsidentity and access managementai governanceControl ManagementCybersecurity CompliancecloudCyber SecuritycomplianceArtificial Intelligence
Section · Company
About Devangles Software
Devangles Software
IT Services & Consulting
11-50
employees
2018
8 years old
Pune, Maharashtra
India
₹5.3L PA avg
Avg at Devangles Software
About
DevAngles provides digital transformation services, focusing on cloud computing and innovative technologies to improve business efficiency and client satisfaction in a rapidly evolving tech landscape.
Employee ratings
10 reviews
4.1/ 5
Culture
3.9
Career growth
3.9
Work-life
4.1
Employees rate it well for
Skill Development43Work Satisfaction41
Find them on