Manager IT GRC

About Snapmint:

India's booming consumer market has over 300 million credit-eligible consumers, yet only 35million actively use credit cards. At Snapmint, we are building a better alternative to credit card that lets consumers buy now and pay later for a wide variety of products, be it shoes, clothes, fashion accessories, clothes or mobile phones. We firmly believe that an enduring financial services business must be built on the bedrock of providing honest, transparent and fair terms.

Founded in 2017, today we are the leading online zero-cost EMI provider in India. We have served over 10M consumers across 2,200 cities and doubling year on year. Our founders are serial entrepreneurs and alumni of IIT Bombay and ISB with over two decades of experience across leading organizations like Oyo, Swiggy, Maruti Suzuki and ZS Associates before successfully scaling and exiting businesses in patent analytics, ad-tech and bank-tech software services.

Role Objective

To design, implement, and operationalize the IT Governance, Risk & Compliance (GRC) framework in line with RBI IT Framework for NBFCs, ensuring organization-wide adoption of information security policies, procedures, and risk governance.

Key Responsibilities

Lead end-to-end implementation of RBI IT Framework for NBFCs across business, IT, and operations.

Develop, review, and maintain:

• Information Security Policy
• IT Policy, Cyber Security Policy
• SOPs, Standards, and Control Procedures

Establish IT Governance structures:

• Information Security Steering Committee
• Roles & responsibilities (RACI)

Conduct IT Risk Assessments:

• Identify, analyze, and evaluate information security risks
• Maintain IT Risk Register

Drive Risk Treatment Plans (RTPs) and track closure.

Map policies and controls to:

• RBI guidelines
• ISO/IEC 27001
• CERT-In directions

Ensure integration of GRC controls into business processes.

Prepare management and board-level reporting.

Support RBI inspections, internal audits, and external audits.

Key Deliverables

• RBI IT Framework implementation roadmap
• Information Security Policies & SOPs
• IT Risk Register & RTP
• Governance and management reports

Skills & Experience

• 510 years in IT GRC / InfoSec Governance
• Strong working knowledge of RBI NBFC IT & Cyber Security Guidelines
• Policy drafting and implementation expertise
• Strong stakeholder coordination skills

Location: Mumbai

Working days : 5 days working