Company: DVK Analytics

Location:
Hyderabad, India Employment Type: Full-time

Experience:
2–4 years About DVK AnalyticsDVK Analytics develops enterprise analytics solutions, including an AI-powered product that sits on top of business intelligence (BI) dashboards to enable enhanced data interaction and AI-driven insights. As we expand our enterprise customer base, we are looking for a hands-on GRC & Information Security Compliance Analyst to help maintain our information security program, product compliance documentation, and customer assurance processes.

Key Responsibilities
1. Information Security & Compliance
• Maintain and update information security policies, procedures, and compliance documentation.
• Support ISO 27001 and SOC 2 compliance activities, including evidence collection, control tracking, and audit preparation.
• Maintain the Record of Processing Activities (RoPA), risk registers, asset inventories, and vendor assessment records.
• Support customer security questionnaires, supplier qualification assessments, and compliance reviews.
• Track compliance gaps, corrective actions, policy reviews, and upcoming deadlines. 2. Product Validation & Assurance
• Coordinate feature testing and validation documentation for our AI-powered BI product in collaboration with the engineering team.
• Maintain test evidence, validation summaries, release records, and change management documentation.
• Help document security responsibilities and workflows between vendors, our product and services, and customers.
• Track product security findings and follow up with engineering teams on remediation.
• Maintain accurate documentation reflecting implemented controls and actual testing activities. 3. Business Continuity & Disaster Recovery
• Maintain Business Continuity (BCP) and Disaster Recovery (DR) plans and supporting documentation.




• Coordinate periodic BCP/DR exercises with IT and engineering teams.
• Document test results, recovery evidence, lessons learned, and corrective actions.
• Coordinate external penetration testing engagements and track findings through closure. 4. Security Awareness & Training
• Coordinate employee information security awareness and onboarding training.
• Maintain training completion records, policy acknowledgements, and competency documentation.
• Help assess training effectiveness and organize periodic refresher sessions. 5. Customer & Vendor Compliance
• Respond to customer requests for security policies, audit evidence, and supplier qualification documentation.
• Support vendor risk assessments and maintain records of security reviews.
• Organize compliance evidence in a structured, audit-ready repository.
• Assist management in preparing accurate responses to enterprise customer security assessments. Required Qualifications
• 2–4 years of experience in GRC, information security compliance, IT audit, or a related field.
• Working knowledge of ISO 27001 and information security controls.
• Experience preparing policies, procedures, audit evidence, risk registers, or compliance documentation.
• Understanding of vendor risk management, data privacy principles, and security questionnaires.
• Valuable documentation, communication, coordination, and follow-up skills.
• Proficiency with spreadsheets, documentation tools, and compliance tracking.
• Ability to work independently,



manage multiple priorities, and collaborate with technical teams. Preferred Qualifications
• ISO 27001 Lead Auditor, Lead Implementer, or Internal Auditor certification.
• Exposure to SOC 2, ISO 22301, business continuity, or disaster recovery.
• Familiarity with SaaS products, software testing, release management, or product validation.
• Exposure to enterprise customer audits, supplier qualification, or regulated-industry requirements.
• Awareness of AI security and privacy considerations. What You'll Accomplish in Your First 90 Days
• Review existing security policies and compliance documentation and identify gaps.
• Organize the compliance evidence repository and establish a compliance calendar.
• Update priority policies, risk registers, and privacy documentation.
• Coordinate product validation evidence for our AI-powered BI product with engineering.
• Establish a documented BCP/DR exercise plan and coordinate the next test.
• Organize employee security training and maintain completion records.
• Create a repeatable process for responding to customer security questionnaires and supplier qualification requests. Who We're Looking ForWe are looking for a detail-oriented, proactive professional who enjoys turning compliance requirements into practical processes. You should be comfortable owning documentation and follow-ups, working with engineers to collect technical evidence, and helping the business meet enterprise customer expectations. You don't need to be an expert in every compliance framework, but you should have a solid foundation in information security and a willingness to take ownership and learn. To apply: Please share your resume, relevant certifications, and a brief overview of your experience with ISO 27001, audit preparation, and information security documentation.

📌 GRC & Information Security Compliance Analyst (India)
🏢 DVK Analytics
📍 India