HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring.

Title: Security GRC Support Analyst
Location: India
Work Mode: Remote
Duration: 06 Months
Role Type: Contract or managed support resource
Reports To: Sr. Manager, Security GRC

Primary Purpose:

- Provide reliable operational support across core Security GRC and security awareness activities while preserving accountable decision-making with the Sr. Manager, Security GRC.

Role Summary:

- The Security GRC Support Analyst executes recurring governance, risk, compliance, vendor-risk, reporting, and security awareness work. The role organizes evidence, maintains accurate records, prepares first drafts and routine analyses, coordinates follow-up, and escalates exceptions or judgment-intensive matters.
- It is designed to operate effectively as an individual contractor, an offshore resource, or a human role supported by approved AI tools.

Key Responsibilities
The role covers:

- Governance and Policy Lifecycle
- Risk, Vulnerability, and Remediation Tracking
- Third-Party and Technology Risk Support
- Security Awareness and Training
- Metrics, Evidence, and Reporting
- Data Governance and Compliance Support
- These responsibilities include maintaining policy inventories, tracking risks and remediation, coordinating vendor-security reviews, collecting security evidence, supporting awareness campaigns and phishing simulations, preparing KPI/KRI reporting, and supporting Microsoft Purview and other compliance activities.





Required Qualifications:

- Working knowledge of security governance, risk, compliance, controls, or audit-support practices.
- Strong written communication, document-quality control, organization, and follow-through.
- Ability to work with structured trackers, ticketing systems, dashboards, questionnaires, and evidence repositories.
- Ability to distinguish routine processing from matters requiring skilled judgment or escalation.
- Experience handling confidential business and security information in accordance with access and data-handling requirements.
- Professional fluency in English and the ability to collaborate effectively across time zones and functions.

Preferred Qualifications

- Experience with NIST CSF, ISO/IEC 27001, SOC 2, third-party risk management, vulnerability remediation, or policy lifecycle management.
- Experience supporting security awareness, phishing simulations, training administration, or employee communications.
- Familiarity with tools such as Diligent One, UpGuard, Tenable, ServiceNow, Microsoft Purview, SharePoint, Excel, and reporting dashboards.
- Experience using approved generative AI or workflow-automation tools for drafting, summarization, data preparation, or quality checks.

Key Point to Confirm During Screening

- The candidate should be able to perform evidence collection and organization, tracker maintenance and routine follow-up, first-draft policies/reports/questionnaires/awareness content, data reconciliation and completeness checks, campaign administration and approved communications, and procedure documentation and workflow-improvement suggestions.
- Final risk acceptance, exception approval, control-owner decisions, final vendor or technology approval, legal/privacy/employment/contractual interpretation, material changes to policy requirements or risk ratings, and external commitments or communications without required approval remain with the accountable owner.

📌 GRC Analyst India
🏢 HonorVet Technologies
📍 India