/ Responsibilities:

The GRC Analyst will support the global IT Security Governance, Risk, and Compliance function by assisting in the execution of compliance programs, audit activities, and risk management processes. This role is responsible for coordinating evidence collection, supporting regulatory and framework adherence, and driving remediation tracking across key regulatory domains including TISAX, NIS2, ISO/IEC 27001, SOX, GDPR, DPDP Act (India), Privacy, and emerging AI regulationsKey Responsibilities:

- Audit Support: Assist in the coordination and execution of internal and external audits (TISAX, NIS2, GDPR, ISO), including evidence gathering, validation, and documentation.

Evidence Management: Collect, review, and organize audit artifacts to ensure completeness, accuracy, and readiness for auditors. Regulatory Compliance: Support compliance activities aligned with GDPR, Privacy laws, AI regulatory requirements, and NIS2 Directive, ensuring adherence to evolving European regulatory expectations. Remediation Coordination: Track and coordinate remediation efforts across IT and business teams, ensuring timely resolution of audit findings and risk gaps. Risk Assessments: Participate in risk assessments by identifying, documenting, and evaluating control effectiveness and residual risks. TISAX Program Support: Assist in maintaining and improving TISAX readiness, including control validation and documentation upkeep. Policy & Documentation: Support development and maintenance of security policies, procedures, and control documentation aligned with global standards. Cross-Functional Collaboration: Work with IT, Legal, Privacy, and business stakeholders to ensure compliance requirements are understood and implemented effectively. Reporting: Prepare audit status reports, compliance dashboards, and risk updates for GRC leadership. Promote a robust culture of security awareness across business and IT stakeholders.

Key Performance Measures: Audit Execution:



Timely and complete delivery of audit evidence with minimal rework required by auditors. Remediation Effectiveness: Percentage of audit findings remediated within agreed timelines. Compliance Readiness: Continuous readiness for regulatory audits (TISAX, GDPR, NIS2, SOX, DPDP) with minimal gaps identified. Documentation Quality: Accuracy and completeness of policies, procedures, and audit artifacts.

Stakeholder Engagement:

- Positive feedback from audit stakeholders and internal teams on coordination and responsiveness.

- Competencies and Behaviors:

- Strong attention to detail and documentation quality

- Analytical mindset with structured problem-solving skills

- Effective communication and stakeholder coordination

- Ability to manage multiple priorities in a fast-paced environment

- Proactive and continuous learning mindset in regulatory and security domains

Qualifications:

- Bachelors degree in Information Security, IT, Risk Management, or related field

- Strong understanding of IT governance, risk management, and compliance principles

- Knowledge of regulatory frameworks including GDPR, NIS2, TISAX, and Privacy requirements

- Familiarity with emerging regulations impacting IT security such as AI governance and regulatory frameworks

Experience:

- Years of Experience: 3–5 years of experience in IT GRC, IT audit, or cybersecurity compliance

- Audit Experience: Hands-on experience working in global delivery models or supporting multinational audits (internal/external)

- Framework Familiarity: Exposure to TISAX, NIS2, SOX, GDPR, ISO/IEC 27001, and related frameworks

- Consulting Background: Preferred experience with a Big-4 consulting or audit firm (e.g., Deloitte, PwC, EY, KPMG)

- Tools & Processes: Experience with GRC tools, audit management platforms, and evidence tracking systems

- Communication: Ability to work with cross-functional teams and present findings clearly

- Scope Factors

- People: Individual contributor supporting the global GRC team under Director leadership

- Geography: Supports global GRC efforts across all Allison operating regions.

📌 Grc Analyst (Pune)
🏢 247Hire
📍 Pune