cybersecurity/GRC professionals

Job Title: CIAM Governance, Procedures & Monitoring Analyst

Job Demand: 1 Position
Experience: 46 Years
Skill Level: A-Level Candidates Only
Job Location: Bangalore (Relocation Candidates Welcome)
Work Hours: Minimum 4-hour overlap with Toronto (ET) working hours
Domain: Cybersecurity GRC | CIAM Governance | Risk & Compliance

Job Summary

We are seeking a detail-oriented CIAM Governance, Procedures & Monitoring Analyst with 46 years of experience in cybersecurity governance, risk and compliance (GRC), operational risk, control monitoring, or process governance.

The ideal candidate will be responsible for developing and maintaining standard operating procedures (SOPs), managing governance inventories, executing control monitoring and quality assurance reviews, validating evidence, tracking exceptions, and supporting risk and compliance initiatives.

The candidate should possess strong analytical skills, advanced Excel proficiency, excellent documentation capabilities, and the ability to work effectively with cybersecurity, technology, risk, audit, and compliance stakeholders.

Key Responsibilities

• Develop, review, maintain, and update SOPs, operational procedures, process documents, and governance documentation.
• Maintain governance inventories covering controls, business processes, control owners, evidence sources, risks, issues, and compliance records.
• Execute CIAM governance monitoring, quality assurance (QA) reviews, evidence validation, and exception tracking activities.
• Conduct root cause analysis, trend analysis, gap assessments, and control monitoring reviews to identify improvement opportunities.
• Support Risk and Control Self-Assessments (RCSA), Risk and Control Matrices (RCM), control assessments, and governance reporting.
• Track control deficiencies, remediation actions, exceptions, and outstanding issues through closure.
• Prepare periodic governance dashboards, management reports, monitoring summaries, and audit-ready documentation.
• Support internal and external audits by maintaining accurate evidence repositories and ensuring documentation completeness.
• Identify process inefficiencies, documentation gaps, and control weaknesses, and recommend corrective and preventive actions.
• Collaborate with cybersecurity, IAM/CIAM, technology, risk, compliance, audit, and business stakeholders to strengthen governance practices.
• Ensure governance records, procedures, and monitoring activities remain accurate, consistent, traceable, and aligned with internal policies and regulatory expectations.

Mandatory Skills

• Process Documentation and SOP Development
• Controls Governance and Operational Risk Management
• Quality Assurance (QA) and Compliance Monitoring
• Governance Documentation and Inventory Management
• Control Evidence Validation and Exception Tracking
• Root Cause Analysis and Gap Identification
• Data Analysis, Trend Analysis, and Governance Reporting
• Advanced Microsoft Excel, including pivot tables, lookup functions, data reconciliation, and reporting
• Risk Assessments, RCSA, and RCM support
• Audit Readiness and Remediation Tracking
• Strong Analytical, Investigation, and Problem-Solving Skills
• Stakeholder Management and Professional Communication

Preferred Skills and Tools

• RSA Archer / Archer GRC
• ServiceNow
• SharePoint
• Jira
• Confluence
• Microsoft Visio
• Excel Power Query
• Governance dashboards and reporting tools

Candidate Profile

The ideal candidate should have:

• 4–6 years of relevant experience in GRC, cybersecurity governance, operational risk, compliance, control monitoring, or process governance.
• Hands-on experience in developing and maintaining SOPs, procedures, governance records, and control documentation.
• Practical experience in monitoring reviews, evidence validation, QA checks, exception management, and issue tracking.
• Strong working knowledge of risk and control frameworks, governance processes, and audit support activities.
• Experience preparing risk assessments, management reports, governance documentation, and stakeholder communications.
• The ability to analyze complex information, investigate discrepancies, identify recurring issues, and recommend process improvements.
• Experience working with senior technology, cybersecurity, risk, audit, and compliance stakeholders.
• Banking, financial services, or other regulated-industry experience is preferred.

Work Location and Schedule

• Location: Bangalore only.
• Relocation: Candidates willing to relocate to Bangalore are eligible.
• Time-Zone Alignment: Must be available for a minimum of 4 hours of overlap with Toronto, Eastern Time (ET), working hours.
• Experience Range: 4–6 years.
• Candidate Quality: A-level candidates with strong relevant experience, analytical capability, documentation skills, and stakeholder management abilities.

Keywords for Naukri Search

CIAM, IAM Governance, Cybersecurity GRC, Governance Risk and Compliance, Control Monitoring, Operational Risk, Compliance Monitoring, SOP Development, Process Documentation, RCSA, RCM, Risk Assessment, Control Testing, Evidence Validation, QA Monitoring, Root Cause Analysis, Gap Analysis, Audit Readiness, Governance Reporting, Archer GRC, ServiceNow, Advanced Excel, Power Query, SharePoint, Jira, Confluence, Banking, Financial Services.

Screening Criteria

Candidates should be shortlisted based on the following:

1. Relevant experience of 4–6 years in GRC, governance, risk, compliance, control monitoring, or related operations.
2. Strong hands-on experience in SOP development, governance documentation, and control inventories.
3. Practical exposure to QA monitoring, evidence validation, exception tracking, and root cause analysis.
4. Advanced Excel and reporting capabilities.
5. Exposure to RCSA, RCM, audit readiness, and remediation tracking.
6. Willingness to work from Bangalore or relocate to Bangalore.
7. Availability for a minimum 4-hour overlap with Toronto ET working hours.
8. Strong communication skills and the ability to work with senior stakeholders.

Important: CIAM domain exposure is desirable. Candidates with strong IAM/CIAM governance experience or transferable GRC and control-monitoring experience should be evaluated based on their actual hands-on responsibilities.