CHENNAI · FULLTIME
GRC Analyst
Briskinfosec Technology And Consulting
Chennai · onsite · Posted 30d ago
Sourced from
Undisclosed1–3 yrsfulltimeChennai
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.5s
- Found the form on Naukri · 15 questions to answer1.1s
- Decided the answers for all of them3.2s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Roles and Responsibilities Compliance Implementation Management
- Implement and maintain compliance programs such as ISO 27001, ISO 22301, GDPR, SOC 2, HIPAA (experience in even one is sufficient; we will train the rest).
- Conduct gap assessments, create remediation plans, and track closure activities.
- Maintain compliance evidence repositories and ensure version control and readiness for audits.
- Identify, assess, and document organizational risks.
- Support risk treatment planning with control owners and monitor progress.
- Prepare documentation, collect evidence, and assist internal and external auditors.
- Coordinate with stakeholders to remediate non-conformities and observations.
Draft, review, and update security and privacy policies, SOPs, and standards aligned with regulatory and framework requirements.
Third-Party Vendor Risk Management - Conduct vendor assessments and evaluate security posture before onboarding.
- Track vendor risks and follow up on mitigation plans.
- Support organization-wide security awareness initiatives.
- Assist in running phishing simulations, role-based training, and compliance workshops.
- Stay updated on emerging regulations, security best practices, and audit expectations.
- Recommend improvements to enhance our GRC maturity.
- 1-3 years of experience in GRC, compliance implementation, IT audit, or cybersecurity.
- Hands-on experience with at least one major standard (ISO 27001, ISO 22301, GDPR, SOC 2, HIPAA, PCI DSS, NIST, etc.).
- If you know only one or two-perfect. We support cross-training into others.
- Strong analytical and documentation skills; ability to identify gaps and propose practical controls.
- Excellent communication skills-capable of translating compliance concepts into clear, actionable guidance.
- Preferred but not required: certifications like ISO 27001 LA/LI, Sec+, CISA, CRISC, CDPSE, or similar.
Job Overview
Location
Chennai, India
Job Type
Full-time
Category
Technology IT
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
SOCSOC 2Vendor Risk ManagementCisagrcIso 27001GdprDssauditsnisthipaapci dsscriscTreatment Planningsecurity awarenessPhishingOnboardingCyber SecurityCommunication SkillsRisk ManagementIT Auditcompliance