Hero Fincorp - Senior Associate - Governance/Risk & Compliance - Information Security

Senior Associate - Governance/Risk & Compliance - Infosec

Policy & Procedure Management

- Create, review, and periodically update IT and Information Security policies, procedures, and standards.

- Coordinate with internal stakeholders for policy alignment with regulatory and industry best practices and timely approvals.

- Maintain a centralized repository of all Information Security policies, procedures, and governance documents.

Audits, Assessments & Compliance

- Facilitate internal, external, and regulatory audits/assessments, including audit kick- off, evidence collection, validation, and closure.

- Respond to auditor and assessor queries with timely and accurate submission of evidence.

- Maintain a secure repository of audit documents and compliance artifacts.

- Track, manage, and drive closure of audit observations and compliance gaps within defined timelines.

Risk Management

- Assist in conducting Information Security Risk Assessments in line with regulatory, organizational, and industry requirements.

- Maintain and update the Information Security Risk Register, ensuring follow- up and closure of mitigation actions.

- Perform third- party/vendor risk assessments, prepare assessment reports, and coordinate remediation activities with vendors.

Training & Awareness

- Conduct Information Security induction sessions for new joiners.

- Organize periodic and role- based security awareness training programs.

- Drive continuous information security awareness initiatives across the organization.

Governance & Monitoring

- Prepare and present monthly Information Security governance and review dashboards to stakeholders.

- Track remediation of gaps identified through access reviews, audits, and governance checks.

- Review MSAs and vendor contracts for compliance with Information Security requirements.

- Conduct periodic governance meetings to monitor end- user security posture and follow up on remediation plans.