5+ Yrs - Bengaluru Only - IT Governance, Risk & Compliance (GRC) Specialist at Neorealm

, karnataka, India -

Full Time

Start Date

Immediate

Expiry Date

30 Aug, 26

Salary

0.0

Posted On

01 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

IT Governance, Risk Management, Compliance, NIST CSF 2.0, ISO 27001:2022, GDPR, DPDP Act, Third-Party Risk Management, IT Audit, IT General Controls, Stakeholder Management, Risk Assessment, AWS, SaaS, Control Testing, Remediation Tracking

Industry

Description

Job Overview We are seeking an experienced IT Governance, Risk & Compliance (GRC) Specialist to drive information security, compliance, audit readiness, and risk management initiatives across the organization. The ideal candidate will have hands-on experience managing compliance programs aligned to NIST CSF 2.0, ISO 27001:2022, GDPR, DPDP Act, Third-Party Risk Management (TPRM), and related security frameworks. This role will work closely with IT, Security, Product, and Business teams to strengthen governance practices, manage audits, mitigate risks, and support continuous compliance improvements. Requirements Key Responsibilities • Manage IT compliance and security governance programs including NIST CSF 2.0, ISO 27001:2022, GDPR, DPDP Act, and related frameworks. • Coordinate internal and external audits, including evidence collection, auditor engagement, remediation tracking, and closure of findings. • Conduct IT risk assessments and support enterprise risk management initiatives. • Manage Third-Party Risk Management (TPRM) activities including vendor assessments, security questionnaires, risk scoring, and ongoing monitoring. • Support development, implementation, and continuous improvement of security controls, policies, and governance processes. • Collaborate with IT, Security, Product, and Business stakeholders to ensure compliance requirements are effectively embedded into operational processes. • Track compliance metrics, risks, audit observations, and remediation activities. • Support continuous improvement initiatives related to information security, risk management, and regulatory compliance. Required Skills & Qualifications • 5+ years of experience in IT Audit, IT Risk, Information Security, Governance Risk & Compliance (GRC), or related domains. • Strong understanding of IT General Controls (ITGC), security controls, compliance programs, and data protection requirements. • Experience managing internal and external audits, control testing, audit evidence collection, and remediation tracking. • Hands-on experience with Third-Party Risk Management (TPRM), vendor assessments, security reviews, and risk evaluation processes. • Working knowledge of: NIST CSF 2.0 NIST SP 800-53 ISO 27001:2022 GDPR DPDP Act • Understanding of cloud environments (AWS preferred), SaaS platforms, and modern technology architectures. • Excellent stakeholder management, communication, and documentation skills. • Strong analytical, risk assessment, and problem-solving capabilities. • B.E. / B.Tech in Computer Science, Information Technology, or related discipline. Preferred Qualifications • Prior experience in Security Engineering or Application Security before transitioning into GRC. • Experience within Banking, Fintech, Insurance, Payments, or other regulated industries. • Big 4 consulting experience in IT Risk Advisory, Cyber Risk, Audit, or Compliance. • Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP, CISM, or equivalent are highly desirable. Benefits Opportunity to work on enterprise-wide Information Security, Compliance, and Risk Management initiatives. Hands-on exposure to NIST CSF 2.0, ISO 27001:2022, GDPR, DPDP Act, and Third-Party Risk Management programs. Collaboration with Security, Product, Engineering, and Compliance leadership teams. High-impact role with visibility across audit, governance, and risk functions. Flexible and fast-paced work environment. Potential for contract extension based on performance and business requirements.

Responsibilities

Drive information security, compliance, and risk management initiatives aligned with NIST and ISO frameworks. Manage internal and external audits, conduct IT risk assessments, and oversee Third-Party Risk Management (TPRM) activities.