Role Overview

The Information Security GRC Analyst is responsible for supporting the organizations Information Security Governance, Risk, and Compliance (GRC) initiatives by coordinating audit, regulatory, and compliance activities. The role involves tracking security risks, audit observations, remediation actions, and regulatory requirements while ensuring timely closure through effective stakeholder coordination.

The individual will work closely with Business, Technology, Risk, Compliance, and Audit teams to support ISO 27001 ISMS and ISO 22301 BCMS activities, maintain governance documentation, prepare compliance reports and dashboards, and assist in ensuring adherence to internal policies, regulatory expectations, and industry best practices.

Key Roles & Responsibilities

Information Security Governance & Compliance

- Support the implementation and continuous improvement of the organizations Information Security Governance framework.
- Assist in ensuring compliance with applicable regulatory, statutory, and internal information security requirements.
- Support the maintenance of information security policies, standards, procedures, and guidelines.

Risk and Compliance Management

- Track and monitor information security observations, risks, non-conformities, and remediation activities.
- Follow up with relevant stakeholders to ensure timely closure of identified security risks and audit observations.
- Maintain risk registers, compliance trackers, and action item repositories.
- Support risk assessment and compliance review activities across the organization.

Regulatory & Audit Coordination





- Coordinate regulatory audits, inspections, and assessments and related compliance activities.
- Facilitate collection, validation, and submission of audit evidence and supporting documentation.
- Track audit observations and ensure timely completion of corrective and preventive actions.
- Coordinate with internal stakeholders and external auditors to support audit execution and observation closure.

ISMS & BCMS Support

- Monitor the implementation and effectiveness of ISO 27001 ISMS and ISO 22301 BCMS controls and activities.
- Assist in maintaining ISO 27001 ISMS and ISO 22301 BCMS compliance documentation, records, and evidence repositories.
- Support periodic reviews, internal audits, management reviews, and continuous improvement initiatives related to the ISMS and BCMS.
- Track control compliance and coordinate remediation efforts for identified gaps.

Reporting & Documentation

- Prepare and maintain governance dashboards, compliance trackers, and management information system (MIS) reports.
- Generate periodic reports on audit status, compliance posture, risk remediation, and regulatory requirements.
- Maintain accurate records of audits, assessments, policies, exceptions,



and compliance activities.
- Support management with timely and accurate compliance status updates and governance reporting.

Stakeholder Management & Coordination

- Coordinate with Business, Technology, Risk, Compliance, and Audit teams to drive timely closure of identified action items.
- Provide periodic updates to management on ongoing compliance initiatives, audit findings, and remediation progress.
- Facilitate communication between internal stakeholders and external assessors, auditors, and regulators as required.

Required Skills & Qualifications

- Minimum 2+ years of experience in Information Security Governance, Risk & Compliance (GRC), Information Security, ISMS, or a related domain.
- Working knowledge of ISO/IEC 27001 and ISO/IEC 22301, Information Security Management Systems (ISMS), and regulatory compliance requirements.
- Experience in audit coordination, compliance tracking, and remediation management.
- Solid documentation, reporting, and stakeholder management skills.
- Proficiency in Microsoft Excel, PowerPoint, and reporting/dashboard preparation.
- Excellent communication, coordination, and analytical skills.
- Relevant certifications such as ISO 27001 Lead Implementer/Internal Auditor, Security+, or equivalent will be an added advantage.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Information Security GRC Analyst (Pune)
🏢 Perydot
📍 Pune