Information Security - GRC

About Policybazaar.com -

Welcome to Policybazaar's official LinkedIn page. We believe in insurance for all, and we drive it through unbiased information and time-efficient processes for all Indian customers. As India's largest insurance brokers, we consider it our responsibility to be every Indian customer's one-stop portal for protection against death, disease and disability -- as well as for mindful investment planning. We understand customers anxiety about claim settlement, so we offer 24x7 online support, on-ground support, as well and even host special claim samadhan events where stuck claims can be reopened and resolved instantly. Our mission, in keeping with IRDAI's inspiring vision, is Har Family Hogi Insured by 2047.

Group Companies – Paisabazaar.com, QuickFixCars, Policybazaar.ae, Zphin

Visit policybazaar.com to know more about us.

About the Job

The Information Security Associate supports governance, risk, and compliance activities across the entity. The role centres on audit support, risk tracking, vendor and third-party governance, control-review assistance, and support for automation initiatives. It suits an early-career professional eager to learn security technologies and work in a regulated, process-driven environment.

Your contribution in PB's journey

• Support first- and second-party audits (ITGC, internal, business-process and client audits) through evidence collection, storage, and status tracking.

• Assist in identifying, documenting, tracking, and following through to closure on risks, in coordination with business, IT, and security teams.

• Support risk-management activities: agreement reviews, vendor onboarding, vendor due-diligence and risk assessments, and third-party integration reviews.

• Assist with governance activities such as DR drills, table-top exercises, and database governance across entities.

• Support reviews of perimeter and endpoint controls (firewall, WAF, physical access, XDR/endpoint tooling) by collating findings and tracking remediation.

• Assist process-improvement and automation initiatives using scripts, dashboards, and workflow tools.

• Maintain and update information-security policies, procedures, and governance documentation.

Your knowledge & expertise that we need

• Eagerness to learn governance, risk, compliance, and security-technology concepts.
• Willingness to pick up scripting, workflow tools, and reporting methods to support automation.
• Strong sense of ownership and responsibility for assigned tasks.
• Ability to communicate clearly with technical and non-technical stakeholders.
• Comfort working within defined processes, timelines, and compliance requirements.
• Professional handling of confidential and sensitive information.