Hero Fincorp - Lead - Governance/Risk & Compliance - Information Security

Role Overview:

We are looking for an experienced GRC Lead to drive Information Security Governance, Risk Management, and Compliance initiatives across the organization. The role will be responsible for cyber risk management, regulatory compliance, audit governance, third-party risk management, security frameworks (ISO 27001, NIST CSF), and security reporting while ensuring alignment with RBI and other regulatory requirements.

Key Responsibilities:

- Lead Information Security Governance and Risk Management programs.

- Ensure compliance with RBI, CERT-In, IT Act, NPCI, UIDAI, and other applicable regulations.

- Manage security audits, assessments, and certification initiatives.

- Oversee third-party/vendor risk management and cyber resilience programs.

- Drive security metrics, reporting, awareness, and stakeholder engagement.

- Lead and mentor the GRC team while collaborating with business, technology, and risk functions.

Requirements:

- Bachelor's degree or higher.

- 12-16 years of experience, including 5+ years in Information Security GRC.

- Experience in Banking, NBFC, FinTech, Payments, Insurance, or Financial Services.

- Strong knowledge of ISO 27001, NIST CSF, cyber risk management, regulatory compliance, audits, and third-party risk management.

- Certifications such as CISA, CRISC, ISO 27001 LA/LI, or ITIL are preferred.