iFlow is hiring GRC Analyst Governance, Risk & Compliance

GRC Analyst Governance, Risk & Compliance

Reports to: Portfolio CISO / VP Security | Experience: 4 5 years in GRC, audit, or compliance roles |
Location: Pune| Type: Full time

ABOUT THE ROLE:

The GRC Analyst will build and maintain the security governance framework across the portfolio companies. You will develop policies, maintain risk registers, manage vendor assessments, and drive compliance alignment across 17 portfolio companies with diverse regulatory obligations.

KEY RESPONSIBILITIES

Develop, maintain, and communicate Information Security Policy suite across portfolio

Build and manage technology risk registers for each portfolio company

Conduct annual vendor risk assessments and enforce security clauses

Lead data classification program rollout across all portfolio entities

Coordinate ISO 27001 and SOC 2 compliance efforts where applicable

Track policy exception requests, risk acceptances, and control deficiencies

Facilitate governance forums and prepare board/exec-level risk reporting

Manage security awareness training programs and phishing simulation schedules





Perform internal control assessments and maturity re-evaluations annually

REQUIREMENTS & SKILLS

Bachelors in Information Systems, Law, or Risk Management

5+ years in GRC, audit, or InfoSec compliance roles

Robust knowledge of ISO 27001, NIST CSF, SOC 2, GDPR frameworks

Experience with GRC tools (ServiceNow, Archer, Vanta, Drata, OneTrust)

Excellent documentation and policy writing skills

Ability to translate technical risks into business language for executives

Certifications preferred: CISM, CISA, CRISC, ISO 27001 Lead Implementer

Experience in multi-entity or portfolio-level governance environments

Solid stakeholder management and cross-functional communication skills

TOOLS & TECHNOLOGIES

ServiceNow GRC

Archer

Reporting Drata

Power BI

Vanta

Microsoft Purview

ISO 27001

SOC 2

NIST CSF

OneTrust

Jira

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Grc Analyst Governance, Risk & Compliance Pune (India)
🏢 Iflow
📍 India