P1C3TSTSCoordinate Security Audits: Serve as the primary point of contact for external auditors to facilitate annual certifications, gather evidence, and track remediation efforts (e.g., SOC 2 Type II, ISO/IEC 27001, PCI-DSS).

Perform Risk Assessments: Conduct routine risk assessments across business units, cloud infrastructures, and internal applications to proactively identify vulnerabilities, evaluate impact, and log them in the enterprise risk register.

Manage Third-Party Risk (TPRM): Evaluate the security and compliance postures of critical third-party vendors and SaaS providers through security questionnaires, SOC report reviews, and contract compliance checks.

Maintain Policies & Procedures: Draft, update, and publish internal information security policies, standards, and guidelines to ensure alignment with evolving regulations and business objectives.Monitor Controls Effectiveness: Implement continuous control monitoring frameworks to verify that technical, administrative, and physical security controls are functioning as intended.Drive Security Awareness:



Develop and deploy security compliance training modules and phishing simulation campaigns to foster a strong culture of security across the global workforce.Framework Familiarity: Solid working knowledge of standard cybersecurity and privacy frameworks (such as NIST CSF, SOC 2, ISO 27001, GDPR, HIPAA, or CIS Controls).At least 8+ years of experience participating in or leading IT audits, gathering compliance evidence, and translating technical controls into business risk terms.GRC Tooling Proficiency: Hands-on experience working with modern GRC or automation platforms (e.g., OneTrust, Vanta, Drata, Archer, ServiceNow, or LogicGate).Analytical Problem-Solving: Proven ability to parse technical system configurations, cloud architectures, and corporate documentation to identify gaps in control complianceRelevant industry certifications (such as CISA, CRISC, CISM, CompTIA Security+, or CIPP).

Experience automated testing environments and integrating GRC tools directly with AWS, Azure, or GCP environments.

Knowledge of emerging algorithmic compliance trends, such as AI governance and the EU AI Act frameworks.

AgileComplex problem solving skilsGRC AnalystAgile

📌 Lead Software Engineer (Bengaluru)
🏢 Virtusa
📍 Bengaluru