GRC analyst
Posted Updated
Description
Job Title: GRC Analyst
Job Location:
Hyderabad or Vishakapatnam, India
Education Qualification:
Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field is preferred.
Compensation:
Competitive Pay
Desired Experience:
We are seeking a proactive and detail-oriented GRC Analyst to support our Governance, Risk, and Compliance engagements. The ideal candidate will assist in conducting compliance assessments, identifying security gaps, maintaining documentation, and helping clients implement and maintain information security and privacy controls. This role offers an opportunity to work on cybersecurity consulting projects and gain practical experience across multiple compliance frameworks
Key Responsibilities:
Employment Type:
Fulltime
- 1 3 years of relevant experience in GRC, information security, IT audit, or cybersecurity consulting.
- Working knowledge of ISO 27001 and information security management systems (ISMS).
- Familiarity with SOC 2, Indias DPDP Act, GDPR, NIST CSF, or other security and privacy frameworks.
- Experience in compliance documentation, risk assessments, audit preparation, or security control assessments.
- Compliance Assessments: Assist in conducting gap assessments and compliance reviews against ISO 27001, SOC 2, DPDP, GDPR, and other applicable frameworks.
- Risk Assessments: Support the identification, assessment, and documentation of information security risks and recommend appropriate mitigation measures.
- Policy Development: Assist in preparing and maintaining information security policies, procedures, standards, and other compliance documentation.
- Audit Support: Collect and review audit evidence, maintain compliance records, and coordinate with stakeholders to support internal and external audits.
- Control Assessment: Evaluate the implementation and effectiveness of security controls and identify gaps, non-conformities, and areas for improvement.
- Remediation Tracking: Maintain risk registers, compliance trackers, and corrective action plans to ensure timely closure of identified gaps.
- Data Privacy: Support assessments related to data protection, privacy requirements, and applicable regulatory obligations.
- Client Coordination: Work with client teams to gather information, validate evidence, clarify compliance requirements, and track implementation progress.
- Reporting: Prepare assessment reports, audit documentation, compliance status reports, and management presentations.
- Continuous Learning: Stay updated on information security standards, regulatory developments, and industry best practices.
About you
Full Name Email Phone Your professional Details
This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.