GRC Consultant

About Krutrim:

Krutrim is building AI computing for the future. Our envisioned AI computing stack encompasses the AI computing infrastructure, AI Cloud, multilingual and multimodal foundational models, and AI-powered end applications. We are India’s first AI unicorn and built the first foundation model from the country.

Our AI stack is empowering consumers, startups, enterprises and scientists across India and the world to build their end AI applications or AI models. While we are building foundational models across text, voice, and vision relevant to our focus markets, we are also developing AI training and inference platforms that enable AI research and development across industry domains. The platforms being built by Krutrim have the potential to impact millions of lives in India, across income and education strata, and across languages.

The team at Krutrim represents a convergence of talent across AI research, Applied AI, Cloud Engineering, and semiconductor design. Our teams operate from three locations: Bangalore, Singapore & San Francisco.

Roles and Responsibilities

• Develop and maintain IS policies based on ISO 27001, ensuring alignment with legal and regulatory requirements such as RBI, CERT-In, PCI-DSS, GDPR.
• Assist in creating and maintaining the IS risk register, identifying risks through various avenues such as audits, incidents, and security assessments
• Analyse threat intelligence inputs to update policies, risk registers, and security awareness training
• Facilitate internal and third-party audits, including GDPR, ISO 27001, ISO 27017, ISO 27018, SOC 2, and PCI-D
• SSConduct Control Self-Assessments (CSA) to ensure continuous compliance with IS policies and address gaps identifi
• edConduct security awareness training for internal and external users to mitigate emerging threats.
• Participate in incident & data breach management, including post-incident analysis & drive corrective risk mitigation ste
• psPerform third-party due diligence & risk assessments to ensure ongoing compliance with IS standards.
• Advocate and review for adherence to IS compliance requirements in vendor agreements
• Participate in disaster recovery (DR) and business continuity (BCP) planning to ensure organisational resilience.
• Monitor regulatory changes and information security trends to ensure ongoing compliance with RBI, GDPR, and PCI-DSS standards.

Skills and Qualification

• 2-7 years of experience in legal and regulatory compliance, such as RBI, SOC2, ISO 27001, GDPR, and PCI-D
• SSStrong understanding of information security concepts, ISMS, and frameworks like the NIST Cybersecurity Framework.
• Experience with cloud security (AWS, GCP, OpenStack), third-party audits, and security assessments.
• Proficiency in developing IS policies and managing security awareness programs.
• Strong written, verbal communication, and interpersonal skills.
• Expertise in ISO/IEC 27001, ISO 27017, ISO 27018, SOC 2, and PCI DSS is highly desirable.
• Ability to adapt and excel in a fast-paced, dynamic environment.