About AndPayments
AndPayments is building the next-generation payments stack for Indian businesses, and for businesses globally that need India-grade payments infrastructure. We operate across Payments, RegTech, B2B SaaS and Prepaid Instruments. These are not separate bets. They are a deliberate stack: compliance infrastructure that enables payment products that enable financial instruments, all built together rather than bolted together.
We move fast because we have to. We care deeply about compliance because we build on regulated infrastructure, and because we believe compliance done right is a competitive moat, not just a cost of doing business. We use AI as a primary operating layer, not as a productivity add-on. If you want to spend the next few years building something that will define how Indian businesses transact, and eventually how businesses transact globally, this is where you should be.
About the role
We are looking for a GRC Consultant who can work directly with customers to understand their governance, risk and compliance challenges, advise them on appropriate frameworks and operating models, and translate those requirements into GRC solution designs. This is a client-facing consulting and pre-sales role covering discovery, workshops, advisory, solution mapping, demonstrations, proposals and handover to implementation.
What you'll do
- Lead customer discovery sessions, requirement-gathering workshops and GRC maturity/gap assessments.
- Understand existing risk, compliance, control, audit and governance processes and identify improvement opportunities.
- Advise customers on GRC operating models, risk methodologies, control structures, compliance requirements and framework mapping.
- Design GRC frameworks, control libraries, risk structures, compliance mappings and process workflows based on customer requirements.
- Translate business and regulatory requirements into functional requirements and solution specifications for the implementation team.
- Conduct product and solution demonstrations aligned to specific customer requirements and use cases.
- Act as the GRC subject-matter expert during sales opportunities, customer workshops, RFPs/RFIs and solution discussions.
- Work with Sales to qualify requirements, shape solution proposals and develop solution narratives for pitches and bids.
- Prepare solution presentations, requirement matrices, process flows and high-level implementation approaches.
- Work closely with technical implementation consultants to ensure proposed solutions are practical and aligned with platform capabilities.
- Participate in customer discussions through solution design and implementation handover.
What we're looking for
- 5–10 years of experience in GRC consulting, risk consulting, compliance consulting, cybersecurity/GRC advisory or GRC solution consulting.
- Strong understanding of GRC processes across Risk Management, Compliance, Policy & Controls, Audit, TPRM, Operational Risk or related domains.
- Experience working with BFSI customers; Indian banking, NBFC, payments or financial-services experience is strongly preferred.
- Experience conducting requirements workshops, assessments, gap analysis and framework/control mapping.
- Ability to translate business and regulatory requirements into practical GRC solution designs.
- Strong customer-facing communication, presentation and workshop-facilitation skills.
- Experience supporting pre-sales, solution pitches, RFP/RFI responses and product demonstrations.
- Working knowledge of RSA Archer, MetricStream, ServiceNow GRC/IRM or comparable GRC platforms.
Nice to have
- Experience with Indian BFSI regulatory requirements.
- Exposure to ISO 27001, NIST, COSO, PCI DSS or similar frameworks.
- GRC or relevant risk/compliance certification - GRCP, CISA, ISO 27001/ 42001 Implementor/ Auditor
- Experience working with technology/product teams during GRC solution implementation.
AI at AndPayments
Use AI tools to accelerate research, requirement synthesis, documentation and delivery wherever appropriate, while applying professional judgement and validating outputs.