GRC Analyst

Job Title :

Analyst, Governance, Risk and Compliance

Location : Bangalore, India

Job Summary :

As the GRC Analyst, you will play a critical role in developing and implementing comprehensive governance, risk, and compliance strategies, policies, and controls to safeguard our organization's reputation and financial integrity.

Key Responsibilities :

Develop and maintain the organization's GRC strategy, policies, and procedures to ensure alignment with regulatory requirements and industry best practices.

Collaborate with cross-functional teams to establish a culture of compliance and risk awareness.

Lead risk assessment processes to identify, assess, and prioritize potential risks and compliance challenges.

Design and implement risk mitigation strategies, controls, and action plans to minimize potential threats to the organization.

Help develop and annually test the organization’s Business Continuity and Disaster Recovery Plans.

Monitor changes in regulations, industry standards, and best practices to keep the organization up-to-date and compliant.

Coordinate internal and external audits, ensuring timely resolution of audit findings.

Qualifications :

Bachelor’s degree in information technology, Cybersecurity, or related field.

A minimum of 3 years of professional experience in governance, risk, and compliance.

Industry-recognized certifications, such as CRISC, CISA, CISM, or CISSP, are highly desirable.

Solid understanding of industry regulations, standards, and frameworks, to include NIST 800-53, SOC 2, ISO 27001, GDPR, CCPA, and PCI DSS compliance requirements, as well as the ability to interpret and implement them effectively.

Exceptional communication, and interpersonal skills.

Strong analytical and problem-solving abilities, along with a keen attention to detail.

Demonstrated ability to build and maintain strong working relationships with internal and external stakeholders.

Experience in creating and delivering compliance and ethics training programs.

Strong proficiency in managing enterprise IT security risk, policies, and controls within Auditboard.

Ability to balance the need for compliance with a pragmatic and business-focused approach.