Lucknow, Uttar Pradesh

Job Summary

Job Description the role

- GRC AnalystGRC (Governance, Risk, and Compliance) Analyst works with process owners, auditors,and stakeholders to analyze, monitor, and address risk management and complianceissues. Responsibilities include administering ISO 27001 and SOC 2 compliance programs,assisting with assessments, and ensuring adherence to SOC2, ISO 27001standards.This role is crucial in protecting the organization’s reputation and ensuring regulatorycompliance. By mitigating risks and preventing breaches, the GRC Analyst enhances ITsecurity and strengthens operational resilience, delivering significant value throughimproved risk management and regulatory alignment.Typical duties and responsibilities1. Conduct risk assessments, validation testing, compliance reviews, and audits inline with ISO or NIST standards.2. Oversee and support SOC 2 and global ISO 27001 audit processes.3. Conduct Internal Audits - implementing and assessing ITGC controls4. Drive the widespread implementation of ISO 27001 standards across theorganization.5. Manage and monitor a central repository for audit evidence.6. Review and update security standards, policies, and practices to meet corporatedemands.7. Share information with managers to avoid surprises, highlight problems, and ensuretimely delivery.8. Develop and maintain a comprehensive GRC framework, ensuring alignment withindustry best practices and regulatory requirements.9. Coordinate with cross-functional teams to identify and mitigate risks associatedwith IT and business processes.10.



Provide expert guidance on regulatory changes and emerging security threats,ensuring the organization remains compliant and secure.11. Conduct Information security Awareness sessions and assessments. Required skills and experience
- ISO 27001 Lead Auditor, CISA, CISM, or CISSP, or working towards thesecertifications. Critical thinking and analytical skills. This includes evaluating risk factors,interpreting regulatory requirements, and making data-driven decisions to enhancecompliance programs and mitigate potential issues. Proven ability to effectively convey complex information and regulatoryrequirements to both technical and non-technical stakeholders. Knowledge of data privacy regulations and best practices, such as GDPR and CCPA.

Key Responsibilities

1. To adhere to quality standards (voice and accent, Tech Monitoring), regulatory requirements and company policies.

2. To ensure positive customer experience and CSAT through First Call Resolution and minimum average handling time ( AHT), rejected resolutions / Reopen Cases.

3. To maintain high login Efficiency (Availability) for customers.

4. To update worklogs and follow shift/ escalation process to escalate complex problem to appropriate support specialists/route problems to 2nd and 3rd level IT support staff as the case be.

5. Work on value adding activities such Knowledge base update & self development.

#body.unify div.unify-button-container.unify-apply-now : focus, #body.unify div.unify-button-container.unify-apply-#body.unify div.unify-button-container.unify-apply-now: focus, #body.unify div.unify-button-container.unify-apply

📌 Sr Analyst (Lucknow)
🏢 HCLTech
📍 Lucknow