Senior GRC Engineer
Razorpay · Posted Sep 11
Online payment gateway, business banking, payroll, and financial services platform
Get a personal compatibility score
Add a resume for personal matches
About the role
Razorpay's GRC engineering function combines regulatory and compliance depth (frameworks, control design and testing, audit judgement, deviations, and the Indian financial-sector stack) with an AI-native practice that assesses AI and LLM systems for compliance risk and uses AI for the mechanical half of the work. The team operates under one of the densest regulatory stacks in Indian technology, spanning the DPDP Act 2023, RBI Payment Aggregator and Payment Gateway directions, PPI Master Directions, RBI Digital Payment Security Controls, PCI DSS v4.x, ISO 27001 and 27701, and SOC 2 simultaneously. This role owns the end-to-end control lifecycle, governs AI/LLM and vendor risk, and builds automation-first GRC systems so compliance scales to the company's velocity.
What you will do
- Own the end-to-end control lifecycle : design, implementation, testing, evidence, and audit readiness
- Drive risk assessments, audit findings (deviations), and remediation closure with clear ownership
- Review cloud security (AWS/GCP), IAM, application security, and data protection controls in production systems
- Evaluate and govern AI/LLM systems, tools, and vendors for data security, privacy, and compliance risks
- Build automation-first GRC systems : continuous monitoring, evidence pipelines, and control validation frameworks
- Support and lead regulatory audits (RBI, ISO 27001, SOC 2, PCI DSS) with production-backed evidence
- Partner with engineering to embed controls into architecture and SDLC (policy-as-code mindset)
- Own third-party/vendor risk assessments with a strong technical lens
Skills used in this role
What the employer is looking for
- 4+ years of experience in GRC, IT audit, security, or compliance engineering
- Strong hands-on expertise in security and compliance frameworks (ISO 27001, SOC 2, PCI DSS, ITGC, DPDP)
- Solid understanding of cloud security, IAM, secure SDLC, and data protection controls
- Proven experience in risk management, audit handling, and control testing
- Exposure to AI/LLM risk, data governance, and vendor security assessments
- Ability to translate deep technical findings into business risk and actionable insights
Preferred qualifications
- Experience in fintech or regulated environments (RBI, payments, banking)
- Hands-on with GRC tools (Vanta, Drata, Secureframe) or compliance automation systems
- Familiarity with automation, scripting, APIs, or policy-as-code approaches
- Experience building monitoring, evidence collection, or compliance pipelines
Benefits and support
- Work on AI + Compliance + Engineering convergence
- Build scalable, automation-first GRC systems instead of manual audit workflows
- High ownership role influencing security posture and regulatory strategy
- Opportunity to set the technical bar for GRC engineering
About Razorpay
Razorpay is India's leading omnichannel payments and full-stack financial solutions company, providing an extensive suite of products to accept, process, and disburse digital payments. Beyond payment gateways, the company offers neo-banking solutions via RazorpayX, business loans, payroll management, and corporate credit cards. It serves millions of businesses ranging from startups and SMEs to large enterprises globally.
- Industry
- Fintech
- Company size
- 3000+ employees
- Founded
- 2013
- Location
- Bengaluru, India
- Funding stage
- Public Company
Funding
Public Company · $742M raised
- 2021-12-19Series F$375M
- 2021-04-19Series E$160M
- 2020-10-12Series D$100M
- 2018-07-05Series C$75M
- 2016-07-12Series B$20M
Leadership
CEO and Co-founder
MD and Co-founder
Chief Operating Officer
Chief Financial Officer
Recent coverage
Razorpay Press Release
Razorpay Launches Vulcan, India's First AI Payments Foundation Model, Fueled by NVIDIA and AWS2026-09-07
Outlook Business
Razorpay Merchants Can Now Accept Apple Pay Online and In-Store2026-10-01
The Paypers
Razorpay plans confidential IPO filing in India targeting USD 600 mln raise2026-04-20
Razorpay Press Release
For the First Time in India, Businesses on RazorpayX Can Now Bank with AI Agents That Work While They Sleep2026-06-01