{"id":1232169,"url":"https://alion.io/job/herofincorp-governancerisk-compliance-analyst","title":"Governance/Risk & Compliance Analyst","company":{"id":2807211,"name":"HeroFinCorp","domain":"herofincorp.com","url":"https://alion.io/company/herofincorp","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Darwinbox","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Delhi, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":49000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2992},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false}],"status":"closed","first_seen_at":"2026-09-03T10:29:52Z","employer_posted_date":null,"last_verified_at":"2026-11-02T10:29:59Z","board_verified":false,"closed_at":"2026-11-02T10:29:59Z","days_open":60,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":60},"description":"Job Description:\n\nKey Responsibilities:\n\nPolicy & Procedure Management:\n\n- Create, review, and periodically update IT and Information Security policies, procedures, and standards.\n\n- Coordinate with stakeholders to ensure timely approval and alignment of policies with regulatory and industry best practices.\n\n- Maintain a centralized repository of all policies, procedures, and governance documents.\n\nAudits, Assessments and Compliances:\n\n- Facilitate internal, external, and regulatory audits/assessments, including audit kick-off, data collection, evidence validation, and closure discussions.\n\n- Respond to auditor/assessor queries, ensuring timely and accurate evidence submission.\n\n- Maintain a secure repository of all documents and related artifact.\n\n- Drive closure of open observations/issues within defined timelines.\n\nRisk Management:\n\n- Assist in conducting Information Security Risk Assessments in line with organizational, regulatory, and industry requirements.\n\n- Maintain and update the risk register, ensuring timely closure of action items arising from identified risks.\n\n- Conduct third-party/vendor risk assessments, prepare assessment reports, and drive remediation plans with vendors.\n\nTraining & Awareness:\n\n- Conduct induction sessions on Information Security for new joiners.\n\n- Organize periodic awareness training including targeted training as and when required.\n\n- Develop and deliver ongoing security awareness initiatives across the organization.\n\nGovernance & Monitoring:\n\n- Prepare and present monthly Information Security review decks and tracking status of action items.\n\n- Track closure of identified gaps from periodic access reviews.\n\n- Review and assess Master Service Agreements (MSAs) and vendor contracts for compliance with Information Security requirements.\n\n- Conduct periodic meetings to monitor end-user security posture and follow-ups on remediation plans.\n\nEligibility Criteria for the Job:\n\nEducation:\n\n- Bachelors degree in information technology, Computer Science, or related field.\n\n- Relevant certifications preferred (e.g. CISA, CISM, ISO 27001 LA/LI, CRISC).\n\nExperience:\n\n- 5 years of relevant experience in Information Security Governance, Risk, and Compliance (GRC).\n\n- Strong knowledge of regulatory frameworks (e.g. ISO 27001, GDPR, RBI, etc).\n\n- Hands-on experience in facilitating audits/assessments and managing security documentation.\n\n- Experience in risk management and vendor security assessments.\n\n- Strong presentation, communication and stakeholder management skills.\n\nSkills & Competencies:\n\n- Detail-oriented with strong analytical skills.\n\n- Ability to work independently and collaboratively in a cross-functional environment.\n\n- Proactive in driving closure of issues and ensuring compliance readiness.\n\n- Strong commitment to fostering a culture of security awareness within the organization.\nSkills\nIT Compliance, IT Risk Management, IT Governance, IT Jobs in BFSI","description_format":"text","description_chars":2942,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Business & SME Lending","Consumer Loans & Pawnshops","Leasing, Auto & Equipment Finance"],"lifecycle":[{"event":"open","at":"2026-09-25T15:05:00Z"},{"event":"expire","at":"2026-11-02T10:29:59Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/herofincorp-governancerisk-compliance-analyst","json_url":"https://alion.io/job/herofincorp-governancerisk-compliance-analyst.json","meta":{"generated_at":"2026-11-04T03:13:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4992,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2807211},"rest":"https://alion.io/mcp/rest/get_company?id=2807211"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fherofincorp-governancerisk-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fherofincorp-governancerisk-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fherofincorp-governancerisk-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/herofincorp-governancerisk-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fherofincorp-governancerisk-compliance-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1232169}},{"tool":"search_jobs","arguments":{"company":"herofincorp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1232169},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}