IT Security & Compliance Analyst (GRC) - Remote

Location: India
Experience: 5+ years
Employment: Full-time

Compensation: 7 lacs-9 lacs
Company: SyncEzy

About SyncEzy

SyncEzy is an Australian B2B SaaS company providing software integrations to customers globally.

We are looking for an experienced IT Security & Compliance Analyst (GRC) to take ownership of our security, privacy, and regulatory compliance activities and continuously strengthen our security posture.

Key Responsibilities

• Manage compliance with SOC 2, ISO 27001, GDPR, and other international security, privacy, and regulatory standards relevant to our business.
• Evaluate and help implement new security and compliance frameworks as customer and regulatory requirements evolve.
• Coordinate audits, assessments, evidence collection and auditor requirements.
• Maintain security policies, controls, risk registers and compliance documentation.
• Identify security/compliance gaps and drive remediation with IT and development teams.
• Conduct access, vendor, and security control reviews.
• Manage security awareness and internal compliance activities.
• Complete customer security questionnaires and enterprise security assessments.
• Manage GRC/compliance platforms and continuously monitor controls.
• Track vulnerabilities, penetration-testing findings, and security issues through resolution.

What We're Looking For

• 5+ years' experience in GRC, Information Security, IT Risk, IT Audit, Privacy or Security Compliance.
• Strong practical experience with SOC 2, ISO 27001, GDPR and/or other recognised international frameworks.
• Experience independently managing audits, assessments and compliance programs.
• Strong understanding of risk management, security controls and data protection.
• Good understanding of cloud/SaaS security including AWS, Microsoft 365, MFA, SSO, encryption, endpoint security, vulnerability management, backups and logging.
• Ability to interpret new regulatory/compliance requirements and translate them into practical controls.
• Excellent written and spoken English.
• Comfortable working independently with management, technical teams, customers, and auditors.

Preferred

Experience with Sprinto, Vanta, Drata, Tugboat, Scrut, or similar GRC platforms, preferably within SaaS/cloud companies.

CISA, CRISC, ISO 27001, Security+, privacy/GDPR or similar certifications are beneficial, but practical experience and demonstrated ownership are more important than certifications.

What Success Looks Like

You will take ownership of SyncEzy's day-to-day security and compliance program, keep the organisation audit-ready, drive remediation, and help SyncEzy adopt new security, privacy, and regulatory standards as our global business evolves.