Cybersecurity GRC Analyst

Visiblaze is building Visiblaze IQ, a next-generation cybersecurity platform focused on cloud security, endpoint security, vulnerability management, asset inventory, security posture, and governance. We are hiring an entry-level Cybersecurity GRC Analyst to support product development, compliance research, control mapping, documentation, and coordination across engineering, design, and leadership teams. This role begins with a 6-month internship/training period where the candidate will gain hands-on exposure to cybersecurity fundamentals, GRC concepts, SaaS product development, cloud security, and security compliance frameworks. High-performing interns may receive a full-time offer with a competitive package and fast-track career growth. Role Overview The Cybersecurity GRC Analyst will help translate cybersecurity, governance, risk, and compliance requirements into clear product inputs for the Visiblaze platform. The role involves working on security controls, compliance frameworks, product workflows, security findings, dashboards, reports, Jira tickets, documentation, evidence requirements, and audit-readiness activities. The person should be structured, detail-oriented, curious, and comfortable working with both technical and business teams. Responsibilities Research cybersecurity and compliance frameworks such as SOC 2, ISO 27001, CIS Controls, NIST, PCI-DSS, HIPAA, and other relevant standards. Help map security findings, vulnerabilities, cloud misconfigurations, endpoint posture checks, and hardening controls to relevant compliance and security frameworks. Support the development of GRC-related product features by documenting requirements, workflows, user stories, acceptance criteria, and expected system behavior. Assist in building and maintaining control libraries, compliance mappings, evidence requirements, policy tracking, risk registers, remediation workflows, and audit-readiness workflows. Work closely with engineering and design teams to clarify requirements, review product screens, identify gaps, and ensure workflows are practical and enterprise-ready. Maintain product and compliance documentation for areas such as CSPM, endpoint security, vulnerability management, asset inventory, posture management, and governance. Track product and compliance-related tasks in Jira or similar tools, follow up on open items, document meeting notes, and help ensure smooth execution. Review dashboards, tables, reports, filters, drilldowns, and workflows from a cybersecurity, compliance, and user-experience perspective. Support internal SOC 2 and audit-readiness work by organizing documentation, evidence, policies, controls, and ownership details. Prepare simple status updates, product notes, release notes, meeting summaries, and progress reports for internal stakeholders. Work in an agile, collaborative startup environment with product, engineering, QA, design, and leadership teams. Success in the First 6 Months Develop a working foundation in cybersecurity, GRC, cloud security, and SaaS product workflows. Understand key compliance frameworks such as SOC 2, ISO 27001, CIS Controls, and NIST. Contribute to real product documentation, control mappings, requirements, and workflows on the Visiblaze platform. Gain hands-on experience with Jira, product documentation, dashboards, security findings, and compliance reporting. Progress from guided research and documentation tasks to independently owning small GRC and product workstreams. Support internal audit-readiness by helping organize evidence, controls, policies, and compliance artifacts. Requirements Recent graduate in Computer Science, Information Technology, Cybersecurity, Engineering, Business, or a related field. Interest in cybersecurity, GRC, compliance, SaaS products, and product development. Basic understanding of cybersecurity concepts such as assets, vulnerabilities, cloud security, endpoint security, risk, controls, remediation, and security findings. Basic understanding of GRC concepts such as policies, controls, audits, evidence, compliance frameworks, exceptions, risk registers, and control testing. Strong written communication skills. Good attention to detail and ability to organize information clearly. Comfortable working with engineering, product, design, QA, and leadership teams. Ability to document requirements, workflows, meeting notes, and task updates clearly. Curiosity toward cloud, cybersecurity, governance, risk, and compliance technologies. Ability to work on-site in Gurgaon. Nice to Have Prior internship, project, certification, or coursework related to cybersecurity, GRC, compliance, product management, business analysis, or project coordination. Exposure to SOC 2, ISO 27001, CIS Controls, NIST, PCI-DSS, HIPAA, or similar frameworks. Basic understanding of AWS, Azure, or GCP. Familiarity with Jira, Confluence, Notion, Google Docs, Excel, Figma, or similar tools. Understanding of Linux basics, cloud security, APIs, or security best practices. Cybersecurity certifications or coursework such as Security+, ISO 27001 Foundation, cloud fundamentals, or GRC-related training would be a plus. Compensation & Growth Path This role begins with a 6-month paid internship/training period with a stipend of ₹28,000 per month. Based on performance, learning ability, ownership, and successful completion of the internship period, selected candidates may receive a full-time offer with a compensation of ₹6,00,000 per annum. High-performing candidates will get the opportunity to take ownership of small GRC, product documentation, compliance mapping, and coordination workstreams as they grow with the company. Why Join Us Mentorship from senior team members and founders. Work on a modern cybersecurity platform covering cloud, endpoint, vulnerability, posture, and governance use cases. Hands-on exposure to real cybersecurity product development. Opportunity to learn both product and GRC from the ground up. Fast-track career growth with the opportunity to own small modules and workstreams over time. A collaborative, innovation-driven startup culture.