Security GRC Analyst II

Overview

Security GRC Analyst II on the Trust & Assurance team, responsible for answering security questionnaires and customer assurance requests with evidence-backed, accurate responses.

What you'll do

• Own a high-volume queue of security questionnaires, due diligence assessments, RFP security sections, and assurance requests.
• Draft responses using AI-assisted response tooling, then verify against an approved answer library and underlying evidence before sending.
• Triage and route incoming requests using established playbooks, resolving routine items and escalating novel/complex ones.
• Maintain and expand the answer library by adding approved answers, retiring stale ones, and flagging inconsistencies.
• Build trust site and customer-facing content and guide commercial teams on pointing customers to it.
• Package evidence for customer security audits and track quality/throughput metrics (turnaround, first-pass accuracy, rework, deflection).

What you'll need

• 2–4 years of experience in security GRC, compliance, IT audit, customer assurance, or a closely related function.
• Working knowledge of SOC 2 and ISO 27001.
• Ability to read a control and understand what it requires.
• Demonstrated precision under volume in SLA-driven or queue-based work where accuracy was measured.
• Strong written English skills for precise, concise security answers.
• Comfort working with AI-assisted tooling with skepticism to verify outputs.

Details

• Location: Bengaluru, Karnataka, India.
• Hybrid work model; onsite at least 50% of the time if within commuting distance to a Diligent office location.