GRC Analyst

This is a fully remote position, open to applicants in India.

📋 Description

• Assist in the development, execution, and upkeep of governance, risk management, and compliance initiatives.

• Evaluate security risks and oversee adherence to internal policies as well as external regulations.

• Facilitate both internal and external audits, including the collection of evidence and validation of controls.

• Ensure that suitable controls are in place to safeguard business information and technology assets.

• Collaborate with teams across Information Security, IT, Legal, Privacy, Internal Audit, and Business Operations.

• Identify risks and monitor remediation efforts.

• Enhance the organization’s overall risk and compliance status.

⛳️ Requirements

• Proven experience in Governance, Risk, and Compliance (GRC), information security, IT risk management, or cybersecurity compliance positions.

• Practical experience in conducting security risk assessments, control evaluations, compliance reviews, and privacy assessments.

• Familiarity with security frameworks and standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or comparable regulatory requirements.

• Background in supporting internal and external audits, including evidence gathering, control verification, and tracking of remediation actions.

• Experience in developing, reviewing, and maintaining security policies, standards, procedures, and compliance documentation.

• Proficient in managing risk registers, control matrices, audit findings, and corrective action plans.

• Experience in conducting security risk assessments for third-party vendors and reviewing supplier compliance documentation.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and growth.

• Supportive work environment that encourages collaboration and innovation.