Compliance Analyst

GRC

We are looking for an experienced GRC to drive Governance, Risk & Compliance initiatives and strengthen our Information Security and Data Privacy framework. The role will work closely with Security, Legal, IT, Engineering, and business teams to ensure regulatory compliance and security readiness.

Key Responsibilities

• Manage and strengthen GRC programs covering risk assessments, ITGC, policies, controls, audits, and third-party risk.
• Drive compliance initiatives for ISO 27001, SOC 2, GDPR, DPDP, PCI-DSS, and NIST frameworks.
• Lead Data Privacy activities including DPIAs, data protection assessments, retention policies, and privacy compliance.
• Manage security audits, control testing, evidence collection, remediation, and certification requirements.
• Support Business Continuity & Disaster Recovery programs and security incident response activities.
• Implement and automate compliance processes using GRC tools.
• Partner with internal and external stakeholders to identify risks, close compliance gaps, and improve security posture.

What Were Looking For

• 3+ years of experience in GRC, Information Security Compliance, Data Privacy, IT Risk, or Cybersecurity.
• Strong hands-on knowledge of ISO 27001, SOC 2, GDPR/DPDP, ITGC, NIST, PCI-DSS, and Third-Party Risk Management.
• Experience with risk assessments, audits, security controls, compliance documentation, and GRC tools.
• Strong stakeholder management, analytical and problem-solving skills.
• Bachelor’s/Master’s degree in Cybersecurity, Information Security, IT, Compliance, or a related field.
• Certifications such as CISA, CISM, CISSP, CRISC, CIPP/E, CIPM, or ISO 27001 Lead Auditor/Implementer will be an advantage.

Why This Role?

This is a great opportunity to work on enterprise-level Security, GRC, and Data Privacy initiatives, contribute to regulatory and certification programs, and play a key role in strengthening the organization's overall security and compliance posture.