GRC Consultant

Role Overview: You will be responsible for leading Information Security GRC activities within the NBFC sector, ensuring compliance with RBI guidelines, ISO 27001, NIST, and DPDP frameworks. Your role will involve preparing detailed reports, managing regulatory compliance, audit support, risk tracking, and process improvement. Your strong analytical, organizational, and communication skills will be crucial in managing multiple priorities in a fast-paced environment. Key Responsibilities: - Collect, analyze, and validate data for RBI submissions. - Maintain KRIs, perform trend analysis, track improvement plans, and ensure timely communication and submissions. - Manage audit calendar, kickoff meetings, and evidence collection. - Track findings to closure, perform RCA, and implement improvement plans. - Monitor regulatory updates, perform impact analyses, update tracking sheets, and prepare responses. - Track and close action points from ISO 27001, NIST, and DPDP gap analyses. - Prepare Board, RMC, and CRO presentations. - Update and monitor the risk register. - Develop, review, and update SOPs. - Manage automation initiatives for GRC processes. Qualification Required: - Proven experience in Information Security GRC within the NBFC sector. - Strong knowledge of RBI guidelines, ISO 27001, NIST, DPDP frameworks, and submission requirements. - Expertise in regulatory compliance, audit management, risk tracking, and process improvement. - Proficiency in preparing detailed reports, presentations, and stakeholder communication. - Familiarity with automation tools for GRC processes. - Excellent analytical, organizational, and communication skills. - Ability to manage multiple priorities in a fast-paced environment.,