Senior GRC Analyst

Overview

Senior GRC Analyst role in the information security team, owning governance, risk, and compliance programs and advising leadership and cross-functional stakeholders.

What you'll do

• Develop, review, and maintain security policies, standards, and procedures.
• Manage the policy exception tracking intake, review, and escalation process.
• Maintain the enterprise risk register, including risk scoring and tracking.
• Conduct risk assessments for new projects, systems, vendors, and periodic reviews.
• Map and maintain control libraries aligned to security/compliance frameworks.
• Own and administer the GRC platform and drive adoption and continuous improvement.

What you'll need

• 3-5 years of hands-on experience in GRC, IT audit, information security, or a related role.
• Working knowledge of at least two major compliance frameworks (e.g., NIST CSF, ISO 27001, SOC 2, HIPAA, PCI-DSS).
• Experience collecting audit evidence and managing audit engagements.
• Familiarity with GRC tools and platforms.
• Strong written communication skills for translating technical risk for non-technical audiences.
• Highly organized ability to manage multiple workstreams and deadlines.

Details

• Location: India.