Risk & Compliance Analyst

Role Objective:

Role & responsibilities

• Compliance Management:

  Ensure organizational adherence to regulatory and cybersecurity compliance frameworks including ISO 27001, SEBI-CSCRF, RBI, CERT-In, and others.

• Policy Governance:

  Maintain, update, and enforce internal cybersecurity and risk policies.

• Risk Assessment:

  Identify, assess, and mitigate information security risks across the organization.

• Training & Awareness:

  Develop and deliver information security awareness programs and training sessions.

• Customer, Vendor & Asset Compliance:

  Ensure compliance from third-party vendors and internal assets with organizational security policies.

• Audit Preparation & Coordination:

  Prepare for internal and external audits; coordinate with auditors; ensure closure of audit findings.

• Reporting & SOP Creation:

  Develop and maintain necessary documentation including reports, procedures, and SOPs.

• Customer Audit Handling:

  Manage and support customer-driven compliance assessments and audits.

• Internal Audit Handling:

  Drive internal audit programs for continuous compliance monitoring.

• ISO & ISMS Implementation:

  Support the implementation and maintenance of ISO 27001 standards and overall ISMS processes.

• ISO Training & Execution:

  Facilitate internal training sessions on ISO standards and ensure compliance execution across teams.

Preferred candidate profile

• Education:

  Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.

• Experience:

  2-3 years in cybersecurity, risk, or IT compliance roles.

• Certifications (Preferred):

• ISO 27001 LA/LI
• CISA
• Other relevant cybersecurity certifications

• Familiarity With:

• SEBI-CSCRF
• RBI Guidelines
• CERT-In Regulations
• SOC2, GDPR

• Tools & Tech:

• GRC tools
• Microsoft Excel
• Audit tracking tools
• SIEM log evidence collection tools

• Soft Skills:

• Excellent documentation and report-writing abilities
• Strong verbal and written communication
• Ability to coordinate audits and work cross-functionally