GRC Analyst

Required Skills

• Strong understanding of ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, DPDPA, NIS2 and cybersecurity governance principles.
• Knowledge of risk management methodologies and control frameworks.
• Experience in audit coordination, evidence collection, and compliance reporting.
• Understanding of vulnerability management and security assessment processes.
• Familiarity with cloud security concepts (AWS, Azure, GCP).
• Strong documentation, stakeholder management, and communication skills.
• Experience with GRC tools such as Archer, ServiceNow GRC, or similar platforms (preferred).
• Ability to prepare and track monthly KPIs and compliance metrics.

Preferred Certifications

• ISO 27001 Lead Auditor / Implementer
• ISO 27701 Lead Auditor / Implementer
• ISO 42001 Lead Auditor / Implementer
• DPDPA
• CISM
• CISA
• CIPP
• CIPM
• CompTIA Security+

Preferred Experience

• ISO 27001 implementation and audit support
• Risk assessment and compliance management
• Vendor risk management and evaluation
• Cybersecurity awareness programs
• Security metrics, monthly KPI tracking, and dashboard preparation for management