GRC Analyst

Location: Bangalore, India

Department: IT Security

Experience: 0 -1

Skills: Auditing and Inspection, ISO/IEC 27001 implementation and Certification , GRC, Process Audit, Compliance management

Key Responsibilities

1. Compliance & Audit Support

• Assist in documenting and maintaining information security policies, procedures, and standards.
• Help prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS).
• Gather, organize, and track evidence required for compliance assessments.

2. Risk Management

• Support the team in conducting routine information security risk assessments.
• Assist in identifying, documenting, and tracking security risks in the company’s Risk Register.
• Follow up with internal teams on the status of risk remediation plans.

3. Third-Party Risk Management (TPRM)

• Review vendor security questionnaires and documentation to assess third-party risk.
• Maintain the repository of approved vendors and track renewal/re-assessment dates.

4. Security Awareness & Reporting

• Assist in administering the company’s security awareness training programs and phishing simulations.
• Help compile data and metrics for weekly or monthly GRC dashboards and reports.