GRC Analyst

Role & responsibilities

• Act as the first line of analysis (L1) to validate that a proposed cybersecurity risk meets criteria for tracking, treatment, and monitoring.
• Identify and appropriately elevate proposed cybersecurity risks that required more detailed and / or tailored analyses by Level 2 cybersecurity technical subject matter experts (L2).
• Recommend and implement appropriate measures to treat risks that reduce potential impacts on information resources to a level acceptable to the senior management of the company.
• Identify and report on new and emerging security risks and risk trends, including participating in risk-treatment discussions and updates to compliance policy and standards.
• Fully understand business requirements and work with cybersecurity business area representatives to define appropriate solutions that satisfy security objectives while meeting business needs.
• Perform first level analysis of app sec controls using the reports from cyber security tools like Wiz , Qualys, Seemplicity, Axonious etc , splunk (coverage perspective); BurpSuite, etc.
• Participate in reviewing application with security architecture and engineering team
• Participate in defining Cyber Security KPIs from GRC perspective like cloud security index , app security index , database security index , TPRM Index
• Participate in the review of changes in processes, standards, and technology to ensure the effectiveness of security controls to meet compliance requirements.
• Support continuous improvements in cybersecurity risk management.

How You Will Succeed :

What You Should Bring :

Your Basic Qualifications :

Role :   System Analyst

Industry Type :   Pharmaceutical & Life Sciences

Department :   IT & Information Security

Employment Type :   Full Time, Permanent

Role Category :   IT Infrastructure Services

Education

UG :   Any Graduate, B.Tech / B.E. in Any Specialization

Skills Required

Archer, Grc