GRC Analyst - Fintech Compliance & Audit

Role & responsibilities

• Plan, coordinate, and execute internal and external audits related to ISO 27001, ISO 9001, PCI DSS, SOC 2 Type II, and SAR
• Collaborate with external auditors, regulatory bodies, and third-party vendors to facilitate audit readiness and ensure timely closure of findings
• Maintain and enhance the Information Security Management System (ISMS) and Quality Management System (QMS) controls and documentation.
• Drive third-party risk assessments and vendor due diligence aligned with compliance standards and fintech sector expectations
• Coordinate with engineering, DevOps, IT, SecOps, Product, and legal teams to map controls, gather evidence, and ensure policy enforcement
• Monitor and track non-conformities, risk treatment plans, and corrective/preventive actions (CAPA)
• Maintain audit trails, compliance dashboards, and documentation repositories in accordance with regulatory retention standards
• Stay updated on evolving compliance mandates and contribute to the compliance roadmap for certifications and attestations
• Support awareness and training programs across the enterprise on compliance obligations and best practices

Preferred candidate profile

• Bachelors degree in computer science, Information Systems, Cybersecurity, or a related field
• 35 years of experience in GRC roles, preferably in a fintech, BFSI, or regulated enterprise
• Hands-on experience with ISO 27001, ISO 9001, PCI DSS, SOC 2 Type II, and local statutory audit compliance (SAR)
• Experience managing audit cycles end-to-end, including documentation, control validation, and remediation tracking
• Familiarity with GRC platforms (Commercial or open-source tools)
• Excellent understanding of risk management methodologies, control frameworks, and compliance monitoring
• Strong communication skills for stakeholder engagement across technical and non-technical teams
• Certifications such as CISA, ISO 27001 LA, or CRISC are preferred

Preferred Skills:

• Exposure to fintech regulatory guidelines such as RBI, SEBI, DPDPA, or GDPR
• Ability to work independently in agile, fast-paced environments
• Analytical mindset with attention to detail and process discipline