grc analyst

MTBC CareCloud

Job SummaryThe GRC Analyst will support the development, implementation, and maintenance of Governance, Risk, and Compliance (GRC) frameworks, ensuring organizational alignment with regulatory requirements and industry best practices. The role involves assisting in risk assessments, compliance monitoring, documentation management, and audit readiness to strengthen the overall security posture of the organization.Key Responsibilities<ul><li>Support in the implementation and maintenance of Governance, Risk, and Compliance frameworks and policies.</li><li>Conduct and document risk assessments; track and monitor mitigation activities.</li><li>Ensure compliance with standards such as ISO 27001, NIST, HIPAA, GDPR, or other applicable local regulations.</li><li>Maintain and update policies, procedures, and compliance documentation.</li><li>Coordinate with internal teams to ensure audit readiness and support external/internal audits.</li><li>Stay informed of evolving regulations, standards, and best practices related to GRC.</li></ul>Requirements<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cyber Security or related field.</li><li>1&ndash;2 years of experience in GRC, information security, compliance, or related roles.</li><li>Familiarity with frameworks such as ISO 27001, NIST, HIPAA, GDPR, and risk management methodologies.</li><li>Strong analytical, documentation, and communication skills.</li><li>Relevant certifications (preferred): ISO 27001or similar.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>What is current salary?</li><li>What is your expected salary?</li></ul>Work Location: In person

GRC Analyst

Air Products

<div>At Air Products, our purpose is to bring people together to reimagine what&rsquo;s possible, collaborate and innovate solutions to the world&rsquo;s most significant energy and environmental sustainability challenges. Grow with us as we embark on building tomorrow together by being the safest, most diverse and most profitable industrial gas company in the world.
Reimagine What&rsquo;s Possible
Purpose
The Cybersecuity GRC Analyst is responsible for managing and implementing the Governance, Risk and Compliance (GRC) framework within the organization. This role ensures that cybersecurity practices comply with applicable regulations and industry standards while managing the cyber risks effectively
What to include:<ul><li>Govern the cybersecurity function for the organization</li><li>Building the cybersecurity program for the organization</li><li>Governance, Compliance, Risk and Awareness</li></ul>
Nature &amp; Scope
Developing, applying and managing the cybersecurity mandates by the national authorities. It requires high level of soft-skills as employee will interface with BHIG management, internal teams, and BHIG customers to address the business needs and convene on applying it.
What to include:<ul><li>Cybersecuity Manager</li><li>Office while working with all teams across the organization.</li><li>Technical and non-technical assessments.</li></ul>
Principal Accountabilities:<ul><li>
Have cybersecurity experience at Operational Technology/Industrial Control Systems.</li><li>
Expert in managing Cybersecurity Governance, Risk, and Compliance work.</li><li>
Expert in delivering cybersecurity assessments such as Compliance Assessment, Risk Assessment and Maturity Assessment.</li><li>
Knowledgeable in developing cybersecurity strategies and roadmaps to achieve both business and regulatory objectives.</li><li>
Expert in developing a robust cybersecurity program to protect the company assets and information.</li><li>
Expert in dealing with cybersecurity regulations, policies, and procedures (National, International, and internal).</li><li>
Have excellent soft skills in delivering cybersecurity awareness sessions and training programs to various audiences.</li><li>
Skilled to develop, maintain and update various cybersecurity reports &amp; indicators (weekly, monthly, quarterly, annual)</li><li>
Stays up to date in newly cybersecurity developments (regulations update, new technologies rollout, cyber threat landscape news)</li></ul>
Minimum Requirements and Qualifications
What to include:
 Bachelor&rsquo;s degree in cybersecurity, computer science or relevant fields.<ul><li>
Cybersecurity professional certificates, preferably:<ul><li>
CompTIA Security+</li><li>
Certified Governance Risk and Compliance (CGRC)</li></ul></li><li>
Very good English language skills in written and verbal communications</li><li>
Saudi nationality is a must.</li><li>
Minimum 4 years in relevant experience</li></ul>
We are the world&rsquo;s largest hydrogen producer with over 80 years of industrial gas experience. We are hydrogen and industrial gas experts delivering safe, end-to-end solutions, investing in real, clean energy projects at scale, and driving the industry forward to generate a cleaner future.
At Air Products, we work in an environment where we put safety first, diversity is essential, inclusion is our culture, and each person knows they belong and matter. To learn more, visit About Air Products.</div>

Cybersecuity GRC Analyst

INFOCUS-IT

Job Title: Cyber Security Analyst &ndash; GRC (Governance, Risk &amp; Compliance) Department: Information Security / GRC Location: Delhi, India Role Overview: We are looking for an entry-level Cyber Security Analyst to support our GRC team in implementing security policies, conducting risk assessments, and ensuring regulatory compliance with SEBI, CERT-IN, NSE/BSE, and ISO 27001:2022 standards. Key Responsibilities: Assist in drafting and maintaining security policies, procedures, and guidelines. Support ISO 27001:2022 ISMS documentation and evidence collection. Help conduct risk assessments and maintain the risk register. Assist in regulatory compliance activities and audit reporting. Track and document cyber security incidents and maintain compliance records. Skills &amp; Competencies: Basic knowledge of ISO 27001:2022 and cyber security regulations (SEBI, CERT-IN, NSE, BSE). Proficient in MS Office (Excel, Word, PPT). Detail-oriented with strong process-following skills. Willingness to learn about risk assessment, vendor compliance, and regulatory guidelines. Qualifications: Graduate in IT / Computer Science / Cyber Security (preferred).Freshers or up to 1 year experience in GRC/Information Security.Certifications like ISO 27001 Foundation or CompTIA Security+ are a plus. Apply: Send your resume to support@infocus-it.comJob Types: Full-time, Permanent, Fresher, Internship Contract length: 6 monthsPay: &#8377;15,000.00 - &#8377;20,000.00 per monthBenefits:<ul><li>Paid time off</li><li>Work from home</li></ul>Work Location: In person

Cyber Security Analyst

Smarsh

<div><div>Who are we?</div><div></div><div> 
Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines. Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.</div><div></div><div> 
Smarsh is committed to embedding security as a business enabler. The Governance, Risk &amp; Compliance (GRC) team ensures our security practices meet the expectations of regulators, auditors, and customers.</div><div></div><div> 
As a GRC Analyst based in Bangalore, you&rsquo;ll play a key role in supporting the day-to-day operations of the global GRC program. You&rsquo;ll help triage and manage incoming GRC requests, coordinate vendor security reviews, support client assurance activities, and maintain records in GRC systems. This role is ideal for someone early in their GRC career who thrives on structure, enjoys process-driven work, and takes pride in keeping tasks flowing efficiently across global teams.</div>
<h3 class="jobSectionHeader">Core Responsibilities</h3><ul><li>
GRC Queue Management &amp; Triage</li><li>
Monitor and manage the GRC team&rsquo;s shared queue, triaging inbound requests from internal stakeholders and customers.</li><li>
Prioritize and assign tasks related to audits, DDQs, risk assessments, and vendor reviews.</li><li>
Maintain accurate tracking and reporting of GRC requests and responses using Jira Service Desk.</li><li>
Vendor &amp; Third-Party Risk Reviews</li><li>
Conduct initial vendor security assessments using Smarsh templates and questionnaires.</li><li>
Review supplier documentation (SOC 2 reports, ISO certificates, penetration test summaries, etc.).</li><li>
Escalate higher-risk findings to senior GRC team members and ensure closure tracking.</li><li>
Maintain the vendor risk register and ensure documentation is current.</li><li>
Client Assurance Support</li><li>
Assist in responding to client security questionnaires and due-diligence requests.</li><li>
Manage document requests via trust portals or NDAs (e.g., SOC 2, ISO 27001, policies).</li><li>
Coordinate with Legal and Sales to ensure consistent and timely client responses.</li><li>
GRC Documentation &amp; Evidence Management</li><li>
Maintain GRC repositories and ensure evidence is correctly filed and version-controlled.</li><li>
Support audit preparation through document collection and formatting.</li><li>
Help maintain trackers for control testing, risk remediation, and policy acknowledgements.</li><li>
Operational Reporting &amp; Tooling</li><li>
Update GRC dashboards and metrics under guidance from senior analysts.</li><li>
Support the configuration and upkeep of GRC tools and Jira workflows.</li><li>
Identify opportunities for automation or process improvement.</li></ul><h3 class="jobSectionHeader">
Essential Experience</h3><ul><li>
2+ years&rsquo; experience in information security, compliance, or IT risk.</li><li>
Familiarity with frameworks such as ISO 27001, SOC 2, NIST CSF.</li><li>
Experience with vendor risk or client assurance activities.</li><li>
Strong process skills with the ability to follow and improve workflows.</li><li>
Excellent written communication and attention to detail.</li><li>
Comfortable working with distributed global teams.</li></ul><h3 class="jobSectionHeader">
Desirable</h3><ul><li>
Prior experience with Jira and Jira Service Desk is highly desirable.</li><li>
Exposure to GRC or audit tools (e.g., Hyperproof, Drata, Vanta, Archer).</li><li>
Experience working in a SaaS or regulated environment.</li><li>
Certifications such as ISO 27001 Internal Auditor, CISA, or equivalent.</li></ul><h3 class="jobSectionHeader">
Success in this Role Looks Like</h3><ul><li>
GRC queues are triaged and processed efficiently.</li><li>
Vendor reviews are completed accurately and on time.</li><li>
Client assurance requests are handled consistently and professionally.</li><li>
GRC documentation and evidence are always audit-ready.</li></ul><div>
About our culture</div><div></div><div> 
Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humor. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world&rsquo;s leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work Awards. Come join us and find out what the best work of your career looks like.</div></div>

Governance, Risk & Compliance Analyst

Prima Systems

Title: ISO Compliance ManagerTime: 5PM-2AM (Night Shift)Location: Lahore (100% onsite)Lead Auditor:-Plan, execute, and lead ISO 27001:2013 internal audits to evaluate the effectiveness of the ISMS.-Conduct risk assessments and audits of security policies, processes, and controls.-Prepare detailed audit reports, including findings, observations, and recommendations for corrective actions.-Lead external audit engagements with certification bodies and ensure the organization's continued ISO 27001 certification.-Collaborate with internal teams to develop, implement, and review corrective action plans based on audit findings.-Monitor and track the status of corrective and preventive actions related to audits.Governance, Risk, and Compliance (GRC) Analyst Responsibilities:-Develop and maintain GRC frameworks to ensure the organization complies with industry standards and regulations.-Conduct risk assessments, identifying and assessing information security risks, and recommending mitigation strategies.-Monitor compliance with internal policies, procedures, and applicable legal, regulatory, and contractual requirements.-Assist in the development and implementation of security policies, standards, and guidelines across the organization.-Maintain a risk register, ensuring proper documentation of risks, mitigations, and resolutions.-Collaborate with cross-functional teams to ensure alignment with GRC objectives and integrate risk management practices into daily operations.-Stay up to date with the latest industry trends, best practices, and changes in relevant laws and regulations.Training and Awareness:-Provide training and awareness sessions for staff on ISO 27001:2013, information security best practices, and GRC compliance requirements.-Assist in creating a culture of risk awareness across the organization by promoting security awareness programs.Reporting and Documentation:-Develop and maintain audit documentation, including audit plans, risk assessments, and compliance reports.-Prepare regular reports and presentations on GRC and ISO 27001 performance metrics, audit findings, and risk management activities for senior management and stakeholders.-Ensure all relevant security and risk documentation is up-to-date and aligned with regulatory standards.Job Type: Full-timePay: Rs1.00 - Rs2.00 per monthWork Location: In person

ISO Compliance Manager (Night Shift)

Agility

<div>
 
 
 Role Summary:
 
 
 
 We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 
 
 
 Your Responsibilities:
 
 
 
 &nbsp;Compliance and GRC Management
 
 <ul>
 <li>
 &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
 </li>
 </ul>
 <ul>
 <li>
 Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
 </li>
 <li>
 Act as the primary auditee and point of contact for all internal and external information security audits
 </li>
 <li>
 Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
 </li>
 <li>
 Drive a culture of security and resilience across the organization
 </li>
 </ul>
 
 &nbsp;Security Controls &amp; Technical Oversight
 
 <ul>
 <li>
 &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
 </li>
 </ul>
 <ul>
 <li>
 Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
 </li>
 <li>
 Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
 </li>
 <li>
 Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
 </li>
 <li>
 Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
 
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 
 Your Qualifications:
 
 
 <ul>
 <li>
 Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
 </li>
 </ul>
 <ul>
 <li>
 Experience: A minimum of 5 - 10 years of experience in a similar environment
 </li>
 <li>
 Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
 </li>
 <li>
 Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
 </li>
 <li>
 Language: Must be fluent in English, with Arabic as an added advantage.
 
 </li>
 </ul>
 
 
 Your Competencies:
 
 
 
 Technical:
 
 <ul>
 <li>
 Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
 </li>
 <li>
 Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
 </li>
 <li>
 Tools: Practical experience with Vulnerability and Risk Assessment Tools and familiarity with SIEM platforms
 </li>
 <li>
 Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
 </li>
 </ul>
 
 &nbsp;Behavioral:
 
 <ul>
 <li>
 Teamwork and Collaboration
 </li>
 <li>
 Quality and Results focused
 </li>
 <li>
 Learning Agility
 </li>
 <li>
 Business Acumen
 </li>
 <li>
 Decision Making
 </li>
 <li>
 Digital Savvy
 </li>
 <li>
 Agility and Adaptability
 </li>
 <li>
 Negotiation and influence
 </li>
 <li>
 Planning and Organizing
 </li>
 </ul>
</div>

Senior Information Security Analyst - Compliance & GRC

ACA Group

<div>Date: Oct 23, 2025
Location: Pune, IN
Company: ACA Group
<div>About ACA: 

ACA Group is the leading governance, risk, and compliance (GRC) advisor in financial services. We empower our clients to reimagine GRC and protect and grow their business. Our innovative approach integrates consulting, managed services, and our ComplianceAlpha&reg; technology platform with the specialized expertise of former regulators and practitioners and our deep understanding of the global regulatory landscape. 

The Opportunity: 

In the role of Testing Analyst, you will be responsible for participating in and ensuring the successful execution of certain compliance reviews and consulting work conducted by ACA Group (&ldquo;ACA&rdquo;) for clients. The individual in this position will primarily conduct testing of the efficacy of clients&rsquo; regulatory compliance programs implemented pursuant to the Investment Advisers Act of 1940, along with other federal securities laws. This will include careful analyses of clients&rsquo; books and records for potential regulatory deficiencies, as well as communicating findings and recommendations. 

What you&rsquo;ll do: 

Support consultants with compliance program testing, primarily by: 
<ul>
<li>Assisting with the execution of clients&rsquo; compliance program testing</li>
<li>Utilizing ACA&rsquo;s suite of RegTech products throughout the testing process</li>
<li>Reviewing clients&rsquo; regulatory compliance policies and procedures</li>
<li>Researching novel and/or complex compliance issues</li>
<li>Maintaining internal knowledge resources</li></ul> 
 
Assist with other ACA service offerings, as needed, including, but not limited to: 
<ul>
<li>Regulatory filings</li>
<li>Expert network call chaperoning</li>
<li>Anti-money laundering &amp; KYC/CIP testing</li>
<li>Electronic communications surveillance reviews</li>
<li>Online presence (social media) reviews</li>
<li>Marketing material reviews</li></ul> 

Ideally, you will have: 
<ul>
<li>Bachelor's Degree</li>
<li>Major or concentration in compliance, criminal justice, law, business, accounting, finance, and/or economics preferred.</li></ul> 
 
Skills and attributes for success: 
<ul>
<li>3-5yrs of an experience</li>
<li>Demonstrated professional integrity.</li>
<li>Dependable, flexible, and adaptable to new ACA initiatives and changing client needs.</li>
<li>Ability to exercise discretion and make independent judgments on matters of significance.</li>
<li>Ability to work in a fast-paced small team environment.</li>
<li>Ability to establish and maintain effective working relationships with colleagues and consulting staff.</li>
<li>Ability to work independently, multi-task, and prioritize effectively, including managing multiple projects with competing deadlines.</li>
<li>Highly motivated and goal oriented; proactive in one&rsquo;s own education and career progression; volunteers for and shows initiative on both internal and external projects and tasks.</li>
<li>Dedicated to upholding ACA&rsquo;s high-quality standards and customer service focus.</li>
<li>Strong organizational and problem-solving skills with attention to detail.</li>
<li>Strong oral and written communication skills.</li>
<li>Proficient with Microsoft Office applications and comfortable working in a tech-enabled environment.</li>
<li>Ability to become familiar with the Investment Advisers Act of 1940, along with other federal securities laws, rules, and regulatory guidance.</li>
<li>Ability to become familiar with, and proficient in utilizing, ACA&rsquo;s suite of internal and client-facing RegTech products.</li>
<li>Strong analytical skills, including the ability to interpret complicated and nuanced documents, along with applicable laws, rules, and regulatory guidance.</li></ul> 
 
What working at ACA offers: 

We offer a competitive compensation package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to our business. Our Total Rewards package includes medical coverage fully funded by ACA for employees and their families, as well as access to Maternity &amp; Fertility and Wellness programs. ACA also provides Personal Accident Insurance, Group Term Life Insurance, Employee Discount programs, and Employee Resource Groups. You&rsquo;ll be granted time off for designated ACA Paid Holidays, Privilege Leave, Casual/Sick Leave, and other leaves of absence to support your physical, financial, and emotional well-being. 

What we commit to: 

ACA is firmly committed to a policy of nondiscrimination, which applies to recruiting, hiring, placement, promotions, training, discipline, terminations, layoffs, transfers, leaves of absence, compensation, and all other terms and conditions of employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected status.</div></div>

Compliance Analyst (MS)

Search 3043+ Grc analyst jobs near you this October. New roles added regularly across leading industries. Apply today.