Required Skills

- Strong understanding of ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, DPDPA, NIS2 and cybersecurity governance principles.
- Knowledge of risk management methodologies and control frameworks.
- Experience in audit coordination, evidence collection, and compliance reporting.
- Understanding of vulnerability management and security assessment processes.
- Familiarity with cloud security concepts (AWS, Azure, GCP).
- Robust documentation, stakeholder management, and communication skills.
- Experience with GRC tools such as Archer, ServiceNow GRC, or similar platforms (preferred).
- Ability to prepare and track monthly KPIs and compliance metrics.

Preferred Certifications

- ISO 27001 Lead Auditor / Implementer
- ISO 27701 Lead Auditor / Implementer
- ISO 42001 Lead Auditor / Implementer
- DPDPA
- CISM
- CISA
- CIPP
- CIPM
- CompTIA Security+

Preferred Experience

- ISO 27001 implementation and audit support
- Risk assessment and compliance management
- Vendor risk management and evaluation
- Cybersecurity awareness programs
- Security metrics, monthly KPI tracking, and dashboard preparation for management

- Support implementation and maintenance of ISMS aligned with ISO 27001 and other applicable frameworks.
- Conduct information security risk assessments and track risk treatment plans.
- Assist in internal and external audits, compliance reviews, and certification activities.
- Develop,



review, and maintain cybersecurity policies, standards, procedures, and guidelines.
- Monitor compliance with security controls, regulatory requirements, and privacy frameworks including DPDPA, GDPR, SOC 2, PCI DSS, NIST CSF.
- Manage and track security findings, vulnerabilities, and remediation activities.
- Support third-party/vendor risk assessments, due diligence reviews, and ongoing vendor compliance monitoring.
- Facilitate vendor interactions and evaluations to ensure adherence to contractual and regulatory security requirements.
- Maintain risk registers, compliance dashboards, and monthly KPI reports for management review.
- Prepare and deliver monthly compliance and risk reporting to leadership and stakeholders.
- Coordinate security awareness and compliance training programs.
- Assist in incident management, root cause analysis, and corrective action tracking.
- Collaborate with IT, application, cloud, and business teams to ensure security compliance across environments.
- Promote GRC activities globally by showcasing internal capabilities

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 GRC Analyst (Faridabad)
🏢 Yamaha Motor Solutions
📍 Faridabad