The GRC Analyst is responsible for supporting and managing the organization's Governance, Risk, and Compliance (GRC) activities to ensure compliance with information security, privacy, AI governance, and regulatory requirements. The role involves coordinating audits, conducting risk assessments, managing compliance initiatives, responding to client security due diligence, evaluating third-party risks, developing policies and procedures, and driving continuous improvement of the organization's governance framework.
• Good understanding of Governance, Risk, and Compliance (GRC) principles.
• Knowledge of information security fundamentals and risk management concepts.
• Understanding of ISO management systems, particularly ISO 27001.
• Robust analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Strong documentation and report-writing abilities.
• Ability to manage multiple priorities and work effectively in a cross-functional environment.
• Good stakeholder management and interpersonal skills.
• Proficiency in Microsoft Office applications, particularly Excel, Word, and PowerPoint.
• Bachelor's degree in Information Technology, Computer Science, Cyber Security, Information Systems, Business Administration, or a related field.
• Basic understanding of cloud platforms such as AWS, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), including identity and access management, networking, storage, compute, and cloud security concepts.
• Familiarity with information security frameworks and standards such as ISO 27001, ISO 27701, ISO 42001, SOC 2, NIST Cybersecurity Framework, and CIS Controls.
• Understanding of privacy regulations such as GDPR, UK GDPR, DPDP Act, CCPA/CPRA, or similar global privacy laws.
• Knowledge of risk assessments, audit methodologies, supplier risk management, and security governance.
• Familiarity with AI governance, responsible AI principles, and AI risk management is desirable.
• Support and
📌 GRC Analyst (Vadodara)
🏢 IDX
📍 Vadodara