Job Title - GRC Analyst

Experience-5+ years

Location- Chennai

Required Qualifications

- Bachelor s degree in computer science, Information Systems, Cybersecurity, Risk Management, or related discipline; or demonstrated ability to meet job requirements through a comparable number of years of applicable work experience.
- 5 7 years of experience in GRC, IT audit, information security compliance, risk management, privacy compliance or a related security governance role.
- Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53 GDPR, and DPDPA.
- Experience in reviewing control evidence and supporting internal or external audits, including audit request management, evidence validation, and remediation tracking.
- Strong documentation skills to properly record analysis, control status, audit responses, risk decisions, and remediation activities.
- Excellent verbal and written communication skills, with the ability to interact effectively with control owners, business teams, technical teams, auditors, and management.
- Ability to interpret and apply policies, standards, procedures, regulatory expectations, and control obligations in business-relevant and practical manner.
- Strong risk analysis, customer service, problem-solving, consulting, and relationship management skills.




- Ability to work independently and in a team environment, manage multiple priorities, meet deadlines, and operate effectively within a matrix organization.
- Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint.
- Qualified maturity and ability to professionally manage confidential information.
- Flexibility and willingness to participate (daily) in the work processes of an international organization, including
- conference calls scheduled to accommodate global time zones.

Preferred Qualifications

- IT audit, information security, risk, or privacy certifications such as CISA, ISO 27001:2022 Lead Auditor, ISO 27001:2022 Lead Implementer, CRISC, CISSP, CDPSE, HITRUST CCSFP, or equivalent certifications.
- Working knowledge of security and compliance frameworks such as SOC 2, HITRUST, HIPAA, and PCI DSS.
- Hands-on experience supporting SOC 2 Type II audits, ISO 27001 certification or surveillance audits, validate assessments, or client assurance reviews.
- Experience with GRC, audit, risk, or privacy platforms.
- Familiarity with vendor risk management, privacy operations, data protection controls, client assurance, and global shared services environments.
- Ability to articulate the value of security controls and their potential business impacts.

📌 GRC Analyst (Chennai)
🏢 SWITS DIGITAL Private
📍 Chennai