Company: DVK Analytics

Location: Hyderabad, India

Employment Type: Full-time

Experience: 2–4 years

About DVK AnalyticsDVK Analytics develops enterprise analytics solutions, including an AI-powered product that sits on top of business intelligence (BI) dashboards to enable enhanced data interaction and AI-driven insights.

As we expand our enterprise customer base, we are looking for a hands-on GRC & Information Security Compliance Analyst to help maintain our information security program, product compliance documentation, and customer assurance processes.

Key Responsibilities1.

Information

Security & Compliance

- Maintain and update information security policies, procedures, and compliance documentation.
- Support ISO 27001 and SOC 2 compliance activities, including evidence collection, control tracking, and audit preparation.
- Maintain the Record of Processing Activities (RoPA), risk registers, asset inventories, and vendor assessment records.
- Support customer security questionnaires, supplier qualification assessments, and compliance reviews.
- Track compliance gaps, corrective actions, policy reviews, and upcoming deadlines.

- Product Validation & Assurance
- Coordinate feature testing and validation documentation for our AI-powered BI product in collaboration with the engineering team.
- Maintain test evidence, validation summaries, release records, and change management documentation.
- Help document security responsibilities and workflows between vendors, our product and services, and customers.
- Track product security findings and follow up with engineering teams on remediation.
- Maintain accurate documentation reflecting implemented controls and actual testing activities.

- Business Continuity & Disaster Recovery

- Maintain Business Continuity (BCP) and Disaster Recovery (DR) plans and supporting documentation.




- Coordinate periodic BCP/DR exercises with IT and engineering teams.
- Document test results, recovery evidence, lessons learned, and corrective actions.
- Coordinate external penetration testing engagements and track findings through closure.

- Security Awareness & Training

- Coordinate employee information security awareness and onboarding training.
- Maintain training completion records, policy acknowledgements, and competency documentation.
- Help assess training effectiveness and organize periodic refresher sessions.

- Customer & Vendor Compliance

- Respond to customer requests for security policies, audit evidence, and supplier qualification documentation.
- Support vendor risk assessments and maintain records of security reviews.
- Organize compliance evidence in a structured, audit-ready repository.
- Assist management in preparing accurate responses to enterprise customer security assessments.

Required Qualifications
- 2–4 years of experience in GRC, information security compliance, IT audit, or a related field.
- Working knowledge of ISO 27001 and information security controls.
- Experience preparing policies, procedures, audit evidence, risk registers, or compliance documentation.
- Understanding of vendor risk management, data privacy principles, and security questionnaires.
- Positive documentation, communication, coordination, and follow-up skills.
- Proficiency with spreadsheets, documentation tools, and compliance tracking.
- Ability to work independently, manage multiple priorities,



and collaborate with technical teams.

Preferred Qualifications
- ISO 27001 Lead Auditor, Lead Implementer, or Internal Auditor certification.
- Exposure to SOC 2, ISO 22301, business continuity, or disaster recovery.
- Familiarity with SaaS products, software testing, release management, or product validation.
- Exposure to enterprise customer audits, supplier qualification, or regulated-industry requirements.
- Awareness of AI security and privacy considerations.

What You'll Accomplish in Your First 90 Days
- Review existing security policies and compliance documentation and identify gaps.
- Organize the compliance evidence repository and establish a compliance calendar.
- Update priority policies, risk registers, and privacy documentation.
- Coordinate product validation evidence for our AI-powered BI product with engineering.
- Establish a documented BCP/DR exercise plan and coordinate the next test.
- Organize employee security training and maintain completion records.
- Create a repeatable process for responding to customer security questionnaires and supplier qualification requests.

Who We're Looking ForWe are looking for a detail-oriented, proactive professional who enjoys turning compliance requirements into practical processes. You should be comfortable owning documentation and follow-ups, working with engineers to collect technical evidence, and helping the business meet enterprise customer expectations.

You don't need to be an expert in every compliance framework, but you should have a solid foundation in information security and a willingness to take ownership and learn.

To apply: Please share your resume, relevant certifications, and a brief overview of your experience with ISO 27001, audit preparation, and information security documentation.

📌 GRC & Information Security Compliance Analyst (India)
🏢 DVK Analytics
📍 India