Governance, Risk and Compliance (GRC) Lead at Money Honey Financial Services Private Limited · Mumbai · 5 - 7 years · ₹8L - ₹15L / yr · Bootstrapped · Posted 11 Sep 2026
Governance, Risk and Compliance (GRC) Lead
We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the
design, implementation, and maintenance of our ISO 27001 Information Security Management
System (ISMS). This is a hands-on leadership role responsible for establishing a robust security
governance framework, achieving ISO 27001 certification, and embedding a culture of
continuous security improvement across the organization.
Key Responsibilities
● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation
from gap analysis through to successful Stage 1 and Stage 2 certification audits;
manage external auditor relationships
● Risk Management: Develop and operationalize the information security risk
management framework; conduct risk assessments, treatment planning, and risk
acceptance processes.
● Policy & Governance : Author, approve, and maintain the Statement of Applicability
(SoA), information security policies, standards, and procedures aligned with ISO 27001
Annex A controls.
● Control Implementation: Translate ISO 27001 Annex A controls into operational
security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to
implement and validate controls.
● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and
KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective
actions.
● Third-Party Risk: Oversee vendor security assessments and ensure supply chain
security controls meet organizational and ISO 27001 standards.
● Stakeholder Management: Report ISMS performance, risks, and compliance status to
senior leadership and the board; act as primary liaison for external auditors and
regulators.
Required Qualifications
● 5+ years of experience in information security governance, risk, and compliance
● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap
analysis → certification)
● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS
documentation requirements
● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,
OCTAVE, FAIR)
● Familiarity with internal audit practices and managing external certification bodies
● Excellent stakeholder management and ability to influence across technical and non-
technical teams
● Strong documentation and communication skills — able to translate complex standards
into actionable guidance
Preferred Qualifications
● Experience implementing ISMS in fintech, healthcare, or regulated industries
● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks
● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments
● Knowledge of automation for compliance evidence collection and control testing
● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead
Implementer
Why Join Us
● Opportunity to build the security governance function from the ground up
● High-visibility role with direct impact on customer trust and market differentiation
● Collaborative environment that values security as a business enabler, not a blocker
Company Profile:
We are a one-stop financial services shop, widely known for quality of its advice, personalized
service and cutting-edge technology. We started our journey in 2008. Currently we are serving
more than 50,000 investors with a team of 100 members. Our core product offering is mutual
fund, FD, Govt. Bonds, Debenture, etc.
Shubham Vishwakarma
Full Stack Developer - Averlon
About Money Honey Financial Services Private Limited
About
Company social profiles
Similar jobs (8)
Position: Manager – Information Security
Experience: 10+ years
Location: Gurgaon
Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor
Key Responsibilities:
- Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
- Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
- Oversee security risk assessments, audits, and remediation plans across IT and business units.
- Manage a team of security professionals; mentor, coach, and evaluate performance.
- Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
- Lead incident response, RCA, and post-mortem reviews.
- Drive security awareness and training programs across the organization.
- Manage security budgets, vendor relationships, and contract negotiations.
Technical Skills:
- Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
- Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
- Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88 O2 74 97 43
Position: Manager – Information Security
Experience: 8+ years (with minimum 3 years in leadership roles)
Location: Gurgaon
Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor
Key Responsibilities:
? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
? Oversee security risk assessments, audits, and remediation plans across IT and business units.
? Manage a team of security professionals; mentor, coach, and evaluate performance.
? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
? Lead incident response, RCA, and post-mortem reviews.
? Drive security awareness and training programs across the organization.
? Manage security budgets, vendor relationships, and contract negotiations.
Technical Skills:
? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88O 27 49 743
website: www.glansolutions.com
Job Summary
We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.
The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.
Key Responsibilities
- Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
- Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
- Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
- Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
- Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
- Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
- Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
- Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
- Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
- Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.
Required Skills & Experience
- 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
- Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
- Experience with one or more enterprise risk technology platforms, such as:
- RSA Archer
- ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
- Other enterprise GRC and risk management platforms
- Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
- Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
- Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
- Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
- Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
- Strong communication, problem-solving, strategic planning, and decision-making skills.
Preferred Qualifications
- Experience in banking, financial services, insurance, or other regulated industries.
- Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
- Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
- Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.
Key Competencies
- Enterprise GRC Technology Strategy
- Technology Delivery & Programme Leadership
- Risk Platform Implementation and Optimization
- Stakeholder & Vendor Management
- Process Automation and Digital Transformation
- AI/GenAI and Analytics Enablement
- Global Team Leadership
- Governance, Controls and Continuous Improvement
Implementation & Configuration:
• Configure and customize the ServiceNow GRC modules, including Policy and Compliance Management, Risk Management, and Audit Management.
• Develop and manage GRC workflows, including automated processes for risk assessments, policy management, and audit management.
System Administration:
• Administer and maintain the ServiceNow GRC platform, ensuring it operates smoothly and effectively.
• Perform regular system updates, patches, and upgrades as needed.
Integration & Optimization:
• Integrate ServiceNow GRC with other ServiceNow modules (e.g., ITSM, ITOM) and third-party systems to enhance data flow and operational efficiency.
• Optimize the use of ServiceNow GRC to improve risk management processes and compliance tracking.
User Support & Training:
• Provide support to end-users, addressing issues, and answering queries related to ServiceNow GRC.
• Develop and deliver training materials and sessions to ensure users are proficient in utilizing the GRC platform.
Reporting & Analytics:
• Create and manage reports and dashboards to provide insights into GRC activities and performance.
• Analyse data to identify trends, potential risks, and areas for improvement.
• Ensure that the ServiceNow GRC application adheres to industry standards and best practices for governance, risk management, and compliance.
• Stay up-to-date with changes in regulations and compliance requirements that may impact the GRC processes.
To proceed further with your candidature, kindly fill out your details using the following application link:
https://forms.office.com/r/BHLcNbgtzJ
Job Title: Auditor – Management Systems (ISO Standards)
Location: Ahmedabad
Employment Type: Full Time
About the Role
We are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordinationWe are looking for an experienced Management Systems Auditor with an Electrical Engineering background to conduct third-party audits against international ISO standards. The role involves audit planning, on-site assessments, report preparation, and client coordination
We are hiring an experienced Management System Auditor to conduct ISO audits, deliver quality assessment outcomes, and support certification activities. The ideal candidate should have hands on experience in ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 22000, ISO 50001, or other ISO standards, along with strong reporting and client handling skills.
The role involves extensive travel, interaction with clients across different industries, and compliance with ISO IEC 17021 1 and ISO 19011 guidelines.
Key Responsibilities
- Plan and conduct third-party certification audits, including Stage 1, Stage 2, Surveillance, and Re-certification audits.
- Assess client compliance with applicable ISO management system standards.
- Prepare audit plans, checklists, and detailed audit reports.
- Identify non-conformities, document audit findings, and ensure timely report submission.
- Coordinate with client teams and maintain professional audit practices.
- Identify potential business opportunities during client engagements.
Mandatory Requirements
- Education: B.E./B.Tech in Electrical Engineering.
- Experience: Minimum 5 years of relevant professional experience; experience in third-party auditing is strongly preferred.
- Certifications: IRCA/CQI Lead Auditor certifications in ISO 9001, ISO 14001, ISO 45001, and ISO 50001, or willingness to obtain all required certifications before joining.
- Audit Experience: Exposure to certification audits, audit documentation, compliance assessments, and ISO audit methodologies.
- Industry Exposure: Electrical/Electronics Manufacturing, Power & Energy, Engineering, Automation, Infrastructure, or Renewable Energy is preferred.
- Strong communication, analytical, report-writing, and client-handling skills.
- Willingness to travel extensively (60–80%) across India and occasionally overseas.
What This Role Offers
- Exposure to diverse industries and management system certification audits.
- Opportunities for professional development and continuous learning.
- Performance-based appraisal and competency development.
Auditor – Management Systems (ISO Standards)
Location: Ahmedabad ( Hybrid)
Employment Type: Full-Time
🔎 About the Role
We are hiring a skilled Management System Auditor to conduct ISO audits, deliver high-quality assessment outcomes, and support certification activities. The ideal candidate must have hands-on experience in ISO 9001, 14001, 45001, 27001, 22000, 50001 or other standards, along with strong reporting and client-handling skills.
This role involves extensive travel, interaction with diverse industries, and strict adherence to ISO/IEC 17021-1 and ISO 19011 guidelines.
🧩 Key Responsibilities
- Plan, prepare, and execute Stage 1, Stage 2, Surveillance, Recertification, Transfer & Special Audits.
- Review client documentation, audit scope, and previous audit history.
- Evaluate compliance with applicable ISO standards using process approach, risk-based thinking & sampling techniques.
- Conduct opening & closing meetings and prepare accurate audit reports.
- Record findings, non-conformities, observations, and improvement opportunities.
- Ensure professional client interaction across Quality, EHS, IT, HR & Operations teams.
- Maintain impartiality, confidentiality, and compliance with accreditation guidelines.
- Participate in calibration, witness audits, and competency upgrades.
- Identify business opportunities and refer potential clients during audits.
🎓 Qualifications
- Bachelor’s degree in Engineering, Science, IT, or Environmental Science.
- CQI/IRCA Certified Lead Auditor in at least one standard (Mandatory/Preferred).
- Minimum 5 years industry/auditing experience.
- Experience conducting minimum 15–20 third-party audits (preferred).
- Exposure to sectors such as manufacturing, IT, pharma, infrastructure, services (added advantage).
💼 Skills & Competencies
- Strong knowledge of ISO standards & audit techniques.
- Familiar with ISO 19011 principles.
- Excellent communication, report writing & analytical skills.
- Ability to manage audits across multiple locations.
- High level of integrity, professionalism, and client orientation.
- Proficiency in MS Office.
📈 Key Performance Indicators (KPIs)
- Number of audits completed within timeline & quality standards.
- Accuracy and clarity of audit reports.
- Client satisfaction scores and feedback.
- Lead sharing & business development support.
- Compliance with accreditation and internal review requirements.
✈️ Travel Requirement
- Willingness to travel 60–80% across India and overseas for on-site audits.
- Flexibility for hybrid (on-site + remote) audits.
Oracle GRC Fusion Security Consultant
Job Code: TRX-26139
Company: Deltacubes
Experience: 7+ Years
Location: PAN India
Employment Type: Full-Time (FTE)
Primary & Secondary Key Skills
Oracle GRC / Oracle Risk Management Cloud
Oracle Fusion Security
Role Summary
We are looking for an experienced Oracle GRC + Fusion Security Consultant to lead functional and technical support operations. The role involves governance, risk management, Segregation of Duties (SoD) monitoring, compliance adherence, access governance, and continuous improvement of Oracle GRC processes in Oracle Fusion Cloud environments.
Key Responsibilities
Manage Oracle GRC and Oracle Fusion Security support operations.
Handle risk assessment, SoD monitoring, access certification, and compliance activities.
Support Oracle Risk Management Cloud modules, including Advanced Access Controls (AAC), Transaction Controls Governor (TCG), and Preventive Controls Advisor (PCA).
Manage role-based access control (RBAC), user provisioning, duty roles, and job roles.
Support security across Oracle Fusion Financials, Procurement, SCM, and HCM.
Coordinate audit activities, risk remediation, and compliance monitoring.
Work with internal and external auditors on SOX, ITGC, and access governance requirements.
Manage AMS and managed services support engagements.
Drive stakeholder coordination, client communication, and continuous process improvement.
Required Skills & Qualifications
Strong hands-on experience in Oracle Risk Management Cloud / Oracle GRC.
Strong expertise in Oracle Fusion ERP Security.
Experience with Segregation of Duties (SoD), access certification, and enterprise access governance.
Knowledge of RBAC, user provisioning, duty roles, and job roles.
Understanding of GRC processes, internal controls, SOX compliance, ITGC, audit management, and risk remediation.
Experience supporting Oracle Fusion Cloud environments.
Minimum 5 years of Oracle GRC implementation or support experience.
Experience in AMS / managed services support models and managing support engagements.
Experience working with internal and external auditors.
Must-Have Skills
Oracle Risk Management Cloud / Oracle GRC
Oracle Fusion Security
Segregation of Duties (SoD)
Access Certification & Governance
SOX Compliance & Audit Support
Good-to-Have Skills
CISA / CRISC / CISSP certifications
Oracle ERP Financials knowledge
ITIL and Service Management
Security Automation & Controls Monitoring
Project & Stakeholder Management
Preferred Certifications
Oracle Risk Management Cloud Certification
Oracle Fusion Security Certification
CISA / CRISC / CISSP
CPA / CA
ITIL Foundation
Key Competencies
Strong communication and presentation skills
Leadership and team coordination
Client relationship management
Analytical and problem-solving abilities
Ability to work in a global delivery model
Job title Sox Compliance Officer
Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/
Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.
Industry: legal, insurance, and healthcare services.
Purpose of role:
We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2
Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.
Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.
Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options
Location and hours Bangalore Office / UK hours
Read less
Follow CutshortShubham Vishwakarma
Full Stack Developer - Averlon