Role Description

Job Description – GRC (Governance, Risk & Compliance) Analyst / Senior AnalystExperience

3–5 years or 5–8 years of relevant experience in Governance, Risk & Compliance (GRC), IT Risk, or IT Compliance.

Role Summary

We are seeking a GRC qualified with strong expertise in IT governance, risk management, compliance frameworks, and control assessment. The ideal candidate will work closely with business and technology teams to strengthen the organization's compliance posture, manage risks, and support audit readiness through effective policy, control, and governance practices.

Must-Have Skills

3–8 years of experience in IT Governance, Risk & Compliance (GRC), IT Risk, or IT Compliance.
Strong understanding of industry compliance frameworks and regulatory standards such as NIST, ISO 27001, SOC 2, GovRAMP, and other relevant security/compliance frameworks.
Experience performing risk assessments, including issue and exception management, evaluating compensating controls, and determining residual risk.
Hands-on experience with IT control testing,



including identifying appropriate audit evidence, validating control effectiveness, and supporting internal/external audits.
Experience developing and maintaining security policies, standards, procedures, and controls that are measurable, actionable, and aligned with business and regulatory requirements.
Strong knowledge of IT governance, risk management methodologies, and compliance best practices.
Excellent written and verbal communication skills, with the ability to communicate effectively with both business stakeholders and technical teams.
Strong analytical, documentation, and stakeholder management skills.

Good-to-Have Skills

Experience supporting SOC 2, ISO 27001, GovRAMP, or similar certification and audit programs.
Exposure to GRC platforms such as Archer, ServiceNow GRC, OneTrust, AuditBoard, or similar tools.
Knowledge of cloud security and compliance (AWS, Azure, or GCP).
Experience working wi

📌 Manager II (Kochi)
🏢 UST
📍 Kochi