Principal Analyst - GRC

Dreaming big is in our DNA. It's who we are as a company. It's our culture. It's our heritage. And more than ever, it's our future. A future where we're always looking forward. Always serving up new ways to meet life's moments. A future where we keep dreaming bigger. We look for people with passion, talent, and curiosity, and provide them with teammates, resources and opportunities to unleash their full potential. The power we create together – when we combine your strengths with ours – is unstoppable. Are you ready to join a team that dreams as big as you do? AB InBev GCC was incorporated in 2014 as a strategic partner for Anheuser-Busch InBev. The center leverages the power of data and analytics to drive growth for critical business functions such as operations, finance, people, and technology. The teams are transforming Operations through Tech and Analytics. Do You Dream Big? We Need You. Job Description

Job Title: GRC Analyst (Cybersecurity) Location: Bangalore (On-Site)

Reporting to: Sr Manager – Cyber Security 1.

Purpose of Role The GRC Analyst is responsible for implementing governance policies, assessing and mitigating risks, and ensuring compliance with regulations and information security best practices. This role supports the cybersecurity team in protecting the organization's digital assets by managing risk through policies, processes, and controls aligned to business objectives, while also promoting security awareness across the organization.

2. Key Tasks and Responsibilities · Support implementation of cybersecurity risk mitigation plans · Conduct risk assessments using industry methodologies · Monitor non-compliance issues and remediation plans · Identify and analyze systems supporting internal controls and SOX · Assess and monitor third-party/vendor risk · Prepare reports, dashboards, and presentations · Develop and maintain information security policies and controls · Ensure compliance with frameworks such as ISO 27001, SOC2, and NIST · Support security awareness and training programs · Collaborate with cross-functional teams to embed security practices · Cyber Security Awareness - Manage phishing simulation campaigns, and associated KPIs

3. Qualifications, Experience, Skills Education : Bachelor’s in computer science, Information Systems, Computer Engineering, Information Security, or related field

Work experience: 3–5 years of experience in cyber risk management, IT Audits

Mandatory Skills (with Proficiency) · Information Security GRC – Advanced · ISO 27001 / GDPR / LGPD – Advanced · Risk & audit management – Advanced · Analytical skills – Advanced

Preferred Skills (with Proficiency) · SOX/SOC2 – Intermediate · Cloud compliance – Intermediate · Agile/project management – Beginner to Intermediate · Certifications (ISO, Security+) – Intermediate And above all of this, an undying love for beer! We dream big to create future with more cheers.