Lead and scale enterprise risk and compliance programs across fintech and payments. Manage risk register, control testing, audits, vendor risk, client due diligence, regulatory interpretation, policy management, KRIs, and governance processes. Partner with cross-functional teams to embed risk into product and onboarding workflows and prepare executive and board-level reporting.
Role Overview
The Security
Risk, GRC & Compliance Analyst supports the day-to-day execution of the
organization's cybersecurity risk, governance and compliance program.
This role is
responsible for maintaining accurate risk and compliance information,
coordinating audit readiness, managing evidence, supporting security
assessments and tracking remediation.
The ideal
candidate is highly organized, detail-oriented and able to independently manage
recurring GRC activities while appropriately escalating material risks and
issues.
Key
Responsibilities
- Maintain the cybersecurity risk
register and track remediation activities.
- Support cybersecurity risk
assessments and document findings.
- Support SOC 2 and PCI readiness
activities, where applicable.
- Maintain the security control
framework and documentation.
- Coordinate control testing and
evidence collection.
- Support external audits and
security assessments.
- Track audit findings, remediation
plans and due dates.
- Manage customer security
questionnaires and security due diligence requests.
- Support third-party cybersecurity
risk assessments.
- Maintain security policies,
standards and related documentation.
- Prepare cybersecurity metrics,
dashboards and management reporting.
- Maintain audit and compliance
evidence in a centralized manner.
- Identify opportunities to automate
evidence collection, questionnaires, reporting and recurring GRC
activities.
- Escalate material security,
compliance or control issues to Security leadership.
- Partner with Technology, Security
and business teams to obtain required information and close identified
gaps.
Requirements
- 4–7 years of experience in
cybersecurity GRC, information security, risk, compliance or a related
discipline.
- Experience with SOC 2,
cybersecurity controls and audit readiness.
- Familiarity with PCI requirements
preferred.
- Experience managing risk
registers, evidence, control testing and remediation tracking.
- Strong documentation and
organizational skills.
- Ability to manage multiple
workstreams and deadlines independently.
- Strong written and verbal
communication skills.
- Financial services, fintech or
regulated-industry experience preferred.
- Familiarity with GRC platforms and
automation tools preferred.
- Remote- US Shift
IncubXperts TechnoConsulting Pune, Mahārāshtra, IND Office
Pune, India
Similar Jobs
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Provides fund accounting services for hedge fund, private equity, and debt fund clients. Responsibilities include trade lifecycle processing, pricing, corporate actions, reconciliations, transaction accounting, investor capital activity, fee and carried-interest calculations, NAV preparation, financial statements, investor reporting, and coordination with custodians, prime brokers, and fund operations teams.
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Leads large-scale technology consulting and digital transformation programs for Life Sciences clients. Responsibilities include solution strategy, delivery governance, stakeholder management, enterprise data and AI implementations, client advisory, proposal development, account expansion, and global team leadership. The role requires expertise in Databricks or Snowflake, Medallion Architecture, cloud data platforms, Generative AI, Agentic AI, and intelligent automation, along with the ability to connect business strategy to technology execution.
Top Skills:
Advanced AnalyticsAgentic AiCloud-Native Data PlatformsDatabricksGenerative AiIntelligent AutomationLarge Language Models (Llms)Medallion ArchitectureSnowflake
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Manages software license assignments, usage reviews, audit reports, chargebacks, asset records, purchase orders, invoice validation, vendor coordination, and CMDB updates. The role also maintains project data, prepares reports and presentations, and follows up on open issues. Candidates should have IT asset management or operations experience, software license and invoice processing knowledge, strong Microsoft Office skills, and preferably ServiceNow and SAP experience.
Top Skills:
Configuration Management Database (Cmdb)ExcelMicrosoft WordSAPServicenow
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
