This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a GRC - Security Analyst based in India.

This role supports the organization’s cybersecurity governance, risk, and compliance program, helping identify and manage security risks across technology, vendors, and business processes. You will contribute to the development and maintenance of security policies, controls, and governance practices while supporting audits and compliance assessments. The position provides broad exposure to frameworks such as SOC 2, HIPAA, HITRUST, and PCI DSS, depending on business requirements. You will collaborate closely with Information Security, IT, Legal, Privacy, Internal Audit, and business stakeholders to translate security issues into actionable business risks. The role also involves third-party risk management, evidence collection, remediation tracking, and security reporting.



This is an opportunity for a detail-oriented cybersecurity skilled to strengthen security maturity while continuously improving GRC processes and automation.

Accountabilities:
- Perform cybersecurity and technology risk assessments across systems, applications, vendors, and business processes, documenting risks and evaluating their potential business impact.
- Maintain information security policies, standards, procedures, control frameworks, risk registers, and governance documentation.
- Support compliance activities aligned with frameworks and regulations such as SOC 2, HIPAA, HITRUST, PCI DSS, and other applicable requirements.
- Assist with internal and external audits, regulatory examinations, security assessments, and customer compliance reviews by gathering, validating, and maintaining control evidence.
- Track audit findings, security risks, control deficiencies, exceptions, and remediation plans through resolution, working with control owners to assess effectiveness and implement improvements.
- Conduct third-party an

📌 GRC - Security Analyst (India)
🏢 Jobgether
📍 India