About Coinswitch

CoinSwitch breaks down the complexities in Crypto, empowering the everyday Indian to make informed investment decisions on a simple and trusted platform. When we started up, Crypto was a field reserved for specialists. Today, over 20 million users trust CoinSwitch to learn, purchase and invest in Crypto. That makes us India's largest crypto app.

On CoinSwitch, users can invest in Crypto with a few simple taps, either as a one-time purchase or in regular intervals through an SIP. But simplicity is not a substitute for informed decisions. A CoinSwitch user spends 27 minutes on our app—to learn about Crypto and Web3 through our educational content and understand the market sentiments through CRE8, the Crypto Rupee Index.

But we are just getting started. CoinSwitch not only plans to double down on making Crypto accessible to everyone but is on track to become the one-stop wealth-tech destination for every Indian.

For more information about CoinSwitch, find additional resources here: https://linktr.ee/coinswitchcareers

About the Role

We're looking for a GRC Analyst to drive compliance across multiple group entities, like ISO 27001, SEBI CSCRF, Data Privacy, SOC2. This role blends compliance, stakeholder management, and technical security understanding, with an expectation to leverage AI/automation for efficiency.

What You'll Do

Maintain and update policies, procedures, and ISMS documentation
Coordinate with stakeholders for evidence collection, control validation & audit readiness
Review evidence for relevance, completeness, and audit defensibility
Drive internal/external audits and track closure of findings
Monitor ISMS objectives and compliance posture
Perform control mapping across compliance frameworks
Work with various teams to validate control implementation

What We're Looking For

Core GRC Experience

2–5 years in GRC / ISMS / InfoSec Compliance
Mandatory hands-on with ISO 27001 (implementation or maintenance)
Experience in audit support & evidence validation
Exposure to regulatory frameworks (SEBI CSCRF)

Technical Skills

Good understanding of endpoint security, network security, IAM, data protection
Hands-on / familiarity with security tools SIEM, EDR, DLP
Ability to map technical controls compliance requirements business impact non-technical explanation to senior leadership

Soft Skills

Strong stakeholder management
Attention to detail
Ability to manage multiple entities and deadlines
Proactive and self-motivated with minimal supervision

Good to Have

ISO 27001 Lead Implementer / Internal Auditor
CISA / CISM
Experience working in multi-entity or regulated environments

Life at CoinSwitch

We take great pride in what we do, and are committed to our mission. And we have a lot of fun while at it!

Here's how we do things at CoinSwitch:

Customer-first: That's the North Star. Everything we do is to make our users investment experience better and simplified.
Ownership: We don't sport lab coats, but we experiment—a lot. And we take ownership. We even have a catchphrase for this: Think big, fail fast, and build better.
Data-driven: The source of truth. Simple as that.
Fun: PS5, anyone Or do you prefer Foosball Or perhaps Carrom And yes, our HR team has a whole list of activities: Disco nights, off-sites, gift boxes, and more!

Speaking of lists, the perks and benefits are so extensive, this space isn't enough. Here are a few:

Parenthood: Up to 8 months of Maternity leave and 1 month of Paternity leave
Gender Reassignment Surgery: Be the best version of you! We'll support you and reimburse your medical bill.

Disclaimer: We are an equal opportunity employer committed to building a respectful and empowering work environment for all people to freely express themselves amongst colleagues who embrace diversity in all respects. Including fresh voices and unique points of view in all aspects of our business not only creates an environment where we can all grow and thrive but also increases our potential to produce work that better represents—and resonates with—the world around us.

GRC / Information Security Compliance Engineer