GRC Analyst- Bengaluru-Contract Role_ Immediate Joiner Required

Role: GRC Analyst

Experience: 4-5 Years

Relevant Experience in GRC: 4+ Years

Notice Period: Immediate Joiners Only

Job Location: Bengaluru

We are looking for a GRC Analyst with 4-6years of experience to lead our Third-Party Risk Management (TPRM) program. You will be responsible for ensuring that our vendors meet our security standards and data privacy requirements. This role sits at the intersection of security, legal, and procurement.

Mandatory Skills: GRC, TPRM, Data Processing Agreements, and Risk Mitigation.

Key Responsibilities (Must Have):

• Understanding the Engagement by liaising with the partner.
• Vendor Assessment: Conduct end-to-end security reviews of third-party vendors using industry-standard questionnaires.
• Clear understanding of data flow diagrams and architecture reviews.
• DPA Review: Partner with the Legal team to review Data Processing Agreements (DPAs), ensuring appropriate technical and organizational measures are in place.
• Risk Mitigation: Identify gaps in vendor security postures and negotiate remediation plans before contract signatures. Key

Good to have: Internal Audit: Support internal audit cycles (ISO 27001/PCI DSS) by gathering evidence and performing gap analyses on internal controls.

Reach us: If you are interested in this position and meet the above qualifications, please reach out to me directly at [email removed] and share your updated resume highlighting your relevant experience.