GRC Analyst - Fintech Compliance & Audit

Role & responsibilities

• Plan, coordinate, and execute

  internal and external audits

  related to ISO 27001, ISO 9001, PCI DSS, SOC 2 Type II, and SAR
• Collaborate with external auditors, regulatory bodies, and third-party vendors to facilitate

  audit readiness

  and ensure timely closure of findings
• Maintain and enhance the

  Information Security Management System (ISMS)

  and

  Quality Management System (QMS)

  controls and documentation.
• Drive

  third-party risk assessments

  and vendor due diligence aligned with compliance standards and fintech sector expectations
• Coordinate with engineering, DevOps, IT, SecOps, Product, and legal teams to map controls, gather evidence, and ensure policy enforcement
• Monitor and track

  non-conformities

  ,

  risk treatment plans

  , and

  corrective/preventive actions (CAPA)

• Maintain

  audit trails

  ,

  compliance dashboards

  , and

  documentation repositories

  in accordance with regulatory retention standards
• Stay updated on evolving compliance mandates and contribute to the

  compliance roadmap

  for certifications and attestations
• Support

  awareness and training programs

  across the enterprise on compliance obligations and best practices

Preferred candidate profile

• Bachelors degree in computer science, Information Systems, Cybersecurity, or a related field
• 35 years of experience in GRC roles, preferably in a

  fintech, BFSI, or regulated enterprise

• Hands-on experience with

  ISO 27001, ISO 9001, PCI DSS, SOC 2 Type II

  , and

  local statutory audit compliance (SAR)

• Experience managing

  audit cycles end-to-end

  , including documentation, control validation, and remediation tracking
• Familiarity with

  GRC platforms

  (Commercial or open-source tools)
• Excellent understanding of

  risk management methodologies

  ,

  control frameworks

  , and

  compliance monitoring

• Strong communication skills for stakeholder engagement across technical and non-technical teams
• Certifications such as

  CISA, ISO 27001 LA, or CRISC

  are preferred

Preferred Skills:

• Exposure to fintech regulatory guidelines such as

  RBI, SEBI, DPDPA

  , or

  GDPR

• Ability to work independently in

  agile, fast-paced environments

• Analytical mindset with

  attention to detail

  and

  process discipline