Role Overview:
Support Cantor Fitzgeralds Global Information Security team in governance, risk, and compliance (GRC) initiatives.
Focus on cybersecurity control execution, including user access recertification.
Collaborate with technology owners and stakeholders to ensure compliance and control effectiveness.

Key Responsibilities:

- Lead initiatives across the cybersecurity controls framework, including access recertification.
- Validate user access appropriateness with IT owners and line managers; resolve control exceptions.
- Support internal and external audits, verifying compliance and identifying improvement areas.
- Participate in audit lookback procedures to confirm proper deprovisioning of terminated or rejected users.
- Compile and organize artifacts and documentation to support audits and management reporting.
- Maintain internal procedural documentation for access recertification processes.
- Stay current with industry standards and frameworks: NIST,



COSO, CMMI, ISO, SOC 1/2, COBIT.

Required Qualifications and Skills:

- Bachelors degree in IT, Cybersecurity, Business Administration, or related field.
- Strong communication skills (written and verbal, English).
- Experience in risk and control management and cybersecurity remediation.
- Proficiency with Microsoft 365 tools and knowledge of access management processes.

Preferred / Valuable-to-Have Skills:

- SOX compliance experience; audit background with a Big Four firm.
- Relevant certifications: CISA, CRISC, CISM, CISSP.

Soft Skills:

- Detail-oriented, self-motivated, proactive, with strong time/project management and problem-solving abilities.
- Passion for technology, continuous learning, and ability to manage multiple priorities under pressure.

📌 GRC Analyst (Hyderabad)
🏢 Kramwen Real Estate Services
📍 Hyderabad