GRC Analyst

We are looking for a GRC professional to manage governance, risk, and compliance activities. The role involves building and maintaining policies, procedures, risk registers, and supporting audits. Our company is compliant with ISO 27001, SOC 2, and PIMS.

Key Responsibilities:

• Create, review, and maintain security policies and procedures
• Own and maintain the risk register (identify, assess, track, and treat risks)
• Perform risk assessments and gap analysis
• Support ISO 27001, SOC 2, and PIMS compliance requirements
• Assist with internal and external audits (evidence collection, audit support)
• Maintain compliance documentation and audit artifacts
• Work with internal teams to implement and improve security controls

Requirements:

• Experience in GRC, risk management, or information security
• Strong understanding of ISO 27001 and SOC 2 frameworks
• Hands-on experience with risk registers and risk treatment plans
• Experience supporting audits
• Strong documentation and communication skills
• Ability to work independently

Nice to Have:

• Experience with PIMS or privacy-related frameworks
• GRC or audit certifications (ISO 27001 LA/LI, CISA, CRISC, etc.)

Job Type: Full-time

Pay: ₹25,000.00 - ₹30,000.00 per month

Benefits:

• Life insurance
• Paid sick time

Work Location: In person