Senior Compliance Analyst Job in Kratikal Tech Private Limited

Responsibilities: Own end-to-end security GRC projects and initiatives to improve our security posture. Maintain our different security controls frameworks, including NIST CSF maturity framework, PCI-DSS and NYDFS, enhancing the frameworks and controls based on recommendations from maturity and risk assessments. Monitor control performance of information security controls across the business for timely and effective execution. Coordinate security audit fieldwork (external and internal audits) and other assurance activities. Execution of third-party risk assessments and enhance our third-party risk assurance process and tooling. Evaluation, maintenance and enhancement of our current security GRC tools. Maintain and improve our information security policy framework, in accordance with our regulatory and compliance requirements. Track progress of issues reported, vulnerabilities, and support in the creation of dashboards and metrics to facilitate this process. Act as a security advocate, supporting business owners requests related to security (evaluate policy exception requests, complete third-party security questionnaires, etc) Maintain our cybersecurity risk register and enhance our cybersecurity risk appetite framework. Requirements: 5-7 years of experience working in an information security GRC function One or more of the following certifications: CISSP, CRISC, CCSP, CCSK, CISA, LA Knowledge of security control and compliance frameworks: NIST CSF, PCI-DSS, ISO 27001, UIDAI, TPRA, IS Audit, RBI based GAP Assessment and SEBI/IRDA Audits Basic understanding of security engineering best practices, as well as cloud security controls and DevOps & CI/CD development environments. Experience driving security GRC initiatives in a proactive and independent manner Experience working with cross-functional teams in fast-paced environments. Solid problem-solving skills and attention to detail.