GRC analyst

Were looking for a motivated and detail-oriented GRC Analyst with 1-3 years of experience in Governance, Risk, & Compliance to join our team and help organizations strengthen their GRC practice.

Job Title

Sales Director (MSSP)

Job Location

Hyderabad or Vishakapatnam, India

Education Qualification

Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field is preferred.

Desired Experience

• 1-3 years of relevant experience in GRC, information security, IT audit, or cybersecurity consulting.
• Working knowledge of ISO 27001 and information security management systems (ISMS).
• Familiarity with SOC 2, Indias DPDP Act, GDPR, NIST CSF, or other security and privacy frameworks.
• Experience in compliance documentation, risk assessments, audit preparation, or security control assessments.

Role Overview

We are seeking a proactive and detail-oriented GRC Analyst to support our Governance, Risk, and Compliance engagements. The ideal candidate will assist in conducting compliance assessments, identifying security gaps, maintaining documentation, and helping clients implement and maintain information security and privacy controls. This role offers an opportunity to work on cybersecurity consulting projects and gain practical experience across multiple compliance frameworks.

Key Responsibilities

• Compliance Assessments: Assist in conducting gap assessments and compliance reviews against ISO 27001, SOC 2, DPDP, GDPR, and other applicable frameworks.
• Risk Assessments: Support the identification, assessment, and documentation of information security risks and recommend appropriate mitigation measures.
• Policy Development: Assist in preparing and maintaining information security policies, procedures, standards, and other compliance documentation.
• Audit Support: Collect and review audit evidence, maintain compliance records, and coordinate with stakeholders to support internal and external audits.
• Control Assessment: Evaluate the implementation and effectiveness of security controls and identify gaps, non-conformities, and areas for improvement.
• Remediation Tracking: Maintain risk registers, compliance trackers, and corrective action plans to ensure timely closure of identified gaps.
• Data Privacy: Support assessments related to data protection, privacy requirements, and applicable regulatory obligations.
• Client Coordination: Work with client teams to gather information, validate evidence, clarify compliance requirements, and track implementation progress.
• Reporting: Prepare assessment reports, audit documentation, compliance status reports, and management presentations.
• Continuous Learning: Stay updated on information security standards, regulatory developments, and industry best practices.

Employment Type

Fulltime

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.