GRC / Information Security Compliance Engineer

About Coinswitch

CoinSwitch breaks down the complexities in Crypto, empowering the everyday Indian to make informed investment decisions on a simple and trusted platform. When we started up, Crypto was a field reserved for specialists. Today, over 20 million users trust CoinSwitch to learn, purchase and invest in Crypto. That makes us India’s largest crypto app.

On CoinSwitch, users can invest in Crypto with a few simple taps, either as a one-time purchase or in regular intervals through an SIP. But simplicity is not a substitute for informed decisions. A CoinSwitch user spends 27 minutes on our app—to learn about Crypto and Web3 through our educational content and understand the market sentiments through CRE8, the Crypto Rupee Index.

But we are just getting started. CoinSwitch not only plans to double down on making Crypto accessible to everyone but is on track to become the one-stop wealth-tech destination for every Indian.

For more information about CoinSwitch, find additional resources here: https://linktr.ee/coinswitchcareers

About the Role

We’re looking for a GRC Analyst to drive compliance across multiple group entities, like ISO 27001, SEBI CSCRF, Data Privacy, SOC2 . This role blends compliance, stakeholder management, and technical security understanding , with an expectation to leverage AI/automation for efficiency.

What You’ll Do

• Maintain and update policies, procedures, and ISMS documentation
• Coordinate with stakeholders for evidence collection, control validation & audit readiness
• Review evidence for relevance, completeness, and audit defensibility
• Drive internal/external audits and track closure of findings
• Monitor ISMS objectives and compliance posture
• Perform control mapping across compliance frameworks
• Work with various teams to validate control implementation

What We’re Looking For

Core GRC Experience

• 2–5 years in GRC / ISMS / InfoSec Compliance
• Mandatory hands-on with ISO 27001 (implementation or maintenance)
• Experience in audit support & evidence validation
• Exposure to regulatory frameworks ( SEBI CSCRF )

Technical Skills

• Good understanding of endpoint security, network security, IAM, data protection
• Hands-on / familiarity with security tools SIEM, EDR, DLP
• Ability to map technical controls → compliance requirements → business impact → non-technical explanation to senior leadership

Soft Skills

• Strong stakeholder management
• Attention to detail
• Ability to manage multiple entities and deadlines
• Proactive and self-motivated with minimal supervision

Good to Have

• ISO 27001 Lead Implementer / Internal Auditor
• CISA / CISM
• Experience working in multi-entity or regulated environments

Life at CoinSwitch

We take great pride in what we do, and are committed to our mission. And we have a lot of fun while at it!

Here’s how we do things at CoinSwitch:

• Customer-first: That’s the North Star. Everything we do is to make our users’ investment experience better and simplified.
• Ownership: We don’t sport lab coats, but we experiment—a lot. And we take ownership. We even have a catchphrase for this: Think big, fail fast, and build better.
• Data-driven: The source of truth. Simple as that.
• Fun: PS5, anyone? Or do you prefer Foosball? Or perhaps Carrom? And yes, our HR team has a whole list of activities: Disco nights, off-sites, gift boxes, and more!

Speaking of lists, the perks and benefits are so extensive, this space isn’t enough. Here are a few:

• Parenthood: Up to 8 months of Maternity leave and 1 month of Paternity leave
• Gender Reassignment Surgery: Be the best version of you! We’ll support you and reimburse your medical bill.

Disclaimer: We are an equal opportunity employer committed to building a respectful and empowering work environment for all people to freely express themselves amongst colleagues who embrace diversity in all respects. Including fresh voices and unique points of view in all aspects of our business not only creates an environment where we can all grow and thrive but also increases our potential to produce work that better represents—and resonates with—the world around us.