GRC Analyst

: Governance, Risk, and Compliance (GRC) Consultant

Position: GRC Analyst/ Consultant (2-6 Years Experience)

Location: Bengaluru, Work from Office

Employment Type: Full-Time

About the Role

We are seeking an experienced Governance, Risk, and Compliance (GRC) professional with proven expertise in implementing and managing compliance frameworks, conducting internal audits, and ensuring adherence to global standards such as ISO 27001, SOC 2, PCI DSS, and ITGC. The candidate will play a key role in driving compliance initiatives, performing risk assessments, and supporting external certification audits.

Key Responsibilities

Lead and execute internal audits

Support in external certification and surveillance audits by coordinating with auditors and stakeholders.

Conduct risk assessments, gap analyses, and compliance assessments across business processes, IT systems, and applications.

Develop, implement, and monitor information security policies, procedures, and controls.

Manage and track remediation of audit findings and ensure timely closure.

Conduct vendor risk assessments and evaluate third-party compliance with regulatory standards.

Provide guidance to internal teams on ISMS, compliance obligations, and security best practices.

Stay updated with evolving regulatory requirements, standards, and industry practices.

Deliver training and awareness sessions

Required Skills & Qualifications

Bachelors degree in Information Security, Computer Science, or related field.

5+ years of hands-on experience in GRC, compliance, and internal audits.

Strong expertise in ISO 27001:2022, SOC 2 (Type I & II), ITGC, PCI DSS, and related frameworks.

Experience in policy and procedure drafting, risk assessments, and audit report documentation.

Excellent understanding of governance models, compliance frameworks, and risk management principles.

Familiarity with regulatory requirements (e.g., GDPR, DPDPA, RBI/SEBI/CERT-In guidelines) is an advantage.

Strong analytical, communication, and stakeholder management skills.

Relevant certifications such as ISO 27001 LA/LI, CISA, CISM, or CRISC are highly desirable.