About This Role
This GRC Analyst role involves supporting Governance, Risk, and Compliance engagements, assisting organizations in strengthening their GRC practices. The ideal candidate will help conduct compliance assessments, identify security gaps, maintain documentation, and support clients in implementing and maintaining information security and privacy controls.
Responsibilities
- Assist in conducting gap assessments and compliance reviews against ISO 27001, SOC 2, DPDP, GDPR, and other applicable frameworks
- Support the identification, assessment, and documentation of information security risks and recommend appropriate mitigation measures
- Assist in preparing and maintaining information security policies, procedures, standards, and other compliance documentation
- Collect and review audit evidence, maintain compliance records, and coordinate with stakeholders to support internal and external audits
- Evaluate the implementation and effectiveness of security controls and identify gaps, non-conformities, and areas for improvement
- Maintain risk registers, compliance trackers, and corrective action plans to ensure timely closure of identified gaps
- Support assessments related to data protection, privacy requirements, and applicable regulatory obligations
- Work with client teams to gather information, validate evidence, clarify compliance requirements, and track implementation progress
- Prepare assessment reports, audit documentation, compliance status reports, and management presentations
- Stay updated on information security standards, regulatory developments, and industry best practices
Requirements
- 1-3 years of relevant experience in GRC, information security, IT audit, or cybersecurity consulting
- Working knowledge of ISO 27001 and information security management systems (ISMS)
- Familiarity with SOC 2, India's DPDP Act, GDPR, NIST CSF, or other security and privacy frameworks
- Experience in compliance documentation, risk assessments, audit preparation, or security control assessments
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field is preferred
Important Details
- Locations: Hyderabad or Vishakapatnam, India
About the Company
This job posting has been aggregated from an external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
