We are looking for a detail-oriented and proactive GRC Analyst to join our growing security
and compliance team. In this role, you will be responsible for maintaining and advancing our
compliance posture across multiple regulatory frameworks, including SOC 2, HIPAA, FERPA,
ISO 27001/27701/42001, TX-RAMP, and GDPR. You will work closely with our security,
engineering and other teams to ensure our platform and operations meet the compliance
regulations - critical to our position as a trusted leader in educational and healthcare
organizations.

Location: Bangalore, Pune, Vadodara

Key Responsibilities
• Evaluate compliance alignment for SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, TX
RAMP, and GDPR, ensuring continuous audit readiness.
• Perform internal gap assessments and readiness evaluation against applicable
frameworks and standards, track remediation plans.
• Monitor the Information Security Management System (ISMS) and Artificial Intelligence
Management System (AIMS) KPIs and objectives in alignment with ISO 27001 and ISO
42001 requirements.




• Coordinate internal and external compliance audits - prepare evidence packages,
manage auditor requests, and drive timely closure of audit findings.
• Monitor control documentation for internal and external audits.
• Collaborate with engineering, product, and DevOps teams to embed compliance
requirements into the SDLC and cloud infrastructure.
• Track, measure, and report key compliance metrics and KPIs on a regular basis.
• Support client-facing compliance activities, including responding to questionnaires,
RFPs, and Third Party Risk Management (TPRM) inquiries from clients and prospects.

Required Skills & Qualifications
• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a
related field.
• 3 - 5 years of experience in information security compliance, GRC, or a closely related
role.• Hands-on, demonstrable experience with two or more of the following frameworks:
SOC 2, HIPAA, ISO 2700

📌 GRC Analyst (Bengaluru)
🏢 Exxat
📍 Bengaluru