GRC Analyst

Job Description GRC Analyst (Governance, Risk & Compliance)

Location: Mumbai

Experience: 12 Years

Department: Risk Advisory / Information Security / Compliance

Employment Type: Full-Time

About the Role

We are looking for a proactive and detail-oriented GRC Analyst with 12 years of experience in Governance, Risk & Compliance and ISO audit processes. The candidate will support compliance initiatives, risk assessments, policy management, and internal/external audit activities to strengthen the organizations information security and compliance framework.

Key Responsibilities

• Support implementation and maintenance of Governance, Risk & Compliance (GRC) frameworks.
• Assist in conducting ISO audits, including ISO 27001 compliance assessments and documentation reviews.
• Perform risk assessments and identify compliance gaps across processes and systems.
• Assist in preparation, review, and maintenance of policies, SOPs, and compliance documents.
• Coordinate with internal teams for audit evidence collection and closure of audit observations.
• Monitor compliance with information security standards, regulatory requirements, and internal controls.
• Track remediation plans and follow up on corrective and preventive actions (CAPA).
• Support vendor risk assessments and third-party compliance reviews where applicable.
• Prepare audit reports, compliance dashboards, and management updates.
• Stay updated on emerging regulatory requirements and industry best practices.

Required Skills & Competencies

• Basic understanding of Governance, Risk & Compliance (GRC) concepts.
• Knowledge of ISO 27001 standards, controls, and audit methodologies.
• Familiarity with risk assessment and compliance management processes.
• Good documentation, analytical, and reporting skills.
• Strong communication and coordination abilities.
• Proficiency in MS Excel, Word, and PowerPoint.
• Ability to work independently and manage multiple tasks effectively.

Eligibility Criteria

• Bachelors degree in Information Technology, Computer Science, Cybersecurity, Commerce, or related field.
• 12 years of relevant experience in GRC, compliance, or ISO audit roles.
• Experience in handling ISO audit documentation and compliance activities is mandatory.

Preferred Certifications

• ISO 27001 Internal Auditor / Lead Auditor certification preferred.
• Knowledge of SOC 2, GDPR, HIPAA, or other compliance frameworks would be an added advantage.

Preferred Profile

• Experience in consulting firms, IT services, fintech, or corporate compliance environments preferred.
• Exposure to information security governance and regulatory audits is desirable.