Security Analyst I, GRC
Information Technology
Remote
Full Time
Travel
This role will help identify and assess security risks, maintain compliance with applicable regulatory and industry requirements, support audits and assessments, and strengthen security governance across the organization. The ideal candidate has a solid understanding of cybersecurity risk, security controls, compliance frameworks, and third-party risk management. This individual will work closely with Information Security, IT, Legal, Privacy, Internal Audit, and business stakeholders to ensure security risks are appropriately identified, documented, communicated, and remediated.
Perform cybersecurity and technology risk assessments to identify, document, and evaluate risks across systems, applications, vendors, and business processes.
Maintain and support the organization's information security policies, standards, procedures, and control framework.
Assist with internal and external audits, regulatory examinations, security assessments, and customer compliance reviews.
Gather, review, and maintain evidence demonstrating the effectiveness of security and compliance controls.
Track security risks, audit findings, control deficiencies, exceptions, and remediation plans through closure.
Conduct third-party and vendor security risk assessments, including reviewing security questionnaires, certifications, audit reports, and supporting documentation.
Maintain the organization's risk register and help ensure risks are appropriately scored, assigned, monitored, and reported.




Support security awareness, policy acknowledgment, and governance initiatives.
Respond to customer and partner security questionnaires and due diligence requests.
Assist with monitoring changes to regulatory requirements, security standards, and industry best practices.
Support security exception and risk acceptance processes.
Collaborate with technical security teams to translate technical vulnerabilities and security issues into understandable business risk.
You are enthusiastic about Security.
Some experience with Incident Response.
Excellent organization and planning skills, both technical and strategic.
Stay updated with the latest in technology and cybersecurity trends to recommend improvements to our IT and security infrastructure.
Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, or a related field, or equivalent professional experience.
3+ years of experience in cybersecurity, governance, risk management, compliance, IT audit, or a related discipline.
Relevant professional certification such as Security+, CISA, CRISC, or CGRC.
Experience performing security risk assessments or evaluating security controls.
Familiarity with regulatory and compliance requirements relevant to the organization's industry.
Ability to communicate security and risk concepts effectively to both technical and non-technical stakeholders.
Proficiency with Microsoft Office or similar productivity and reporting tools.

📌 Security Analyst (Remote) (Bengaluru)
🏢 Getix Health
📍 Bengaluru