JLL supports the Whole You, personally and professionally.

Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology to our clients. We are committed to hiring the best, most talented people in our industry; and we support them through professional growth, flexibility, and personalized advantages to manage life in and outside of work. Whether you’ve got deep experience in commercial real estate, skilled trades, and technology, or you’re looking to apply your relevant experience to a new industry, we empower you to shape a brighter way forward so you can thrive professionally and personally.

Cybersecurity Risk & Compliance Analyst

Reporting to the Cybersecurity Risk Manager, the Cybersecurity Risk & Compliance Analyst provides analytical support across core cybersecurity risk management processes, including exceptions management, issues management, and the cybersecurity risk register, as well as policies and standards maintenance and risk metrics/KPI reporting. This role contributes to cybersecurity program initiatives, policy maintenance, and risk monitoring while learning from senior team members and gaining exposure to business operations.

Key Responsibilities

Exceptions Management

Support the end-to-end exceptions lifecycle, including reviewing exception assessments, performing risk analysis, and coordinating with subject matter experts (SMEs) to validate risk ratings

Prepare exception submissions for approval and acceptance, ensuring documentation meets process and audit standards

Track exception status, expirations, and renewals, and follow up with control/process owners as needed

Maintain exceptions management tooling and templates to support consistent intake and processing

Issues Management

Process and risk-rate individual instances of non-compliance identified through audits, assessments, or self-identification

Work with control owners to validate issue details, root cause, and remediation plans

Track issues through to closure, escalating overdue or high-risk items as appropriate

Maintain issue management documentation and evidence files

Risk Register

Support processing and risk rating of organization-wide cybersecurity risks for inclusion in the risk register

Help maintain and update risk treatment plans under guidance

Support vendor and third-party risk management activities, including questionnaire reviews and evaluation of third-party security controls

Assist with cybersecurity due diligence for business initiatives and embedding requirements into business processes

Policies & Standards Maintenance

Work with policy and standards SMEs to ensure verbiage remains accurate, current, and aligned to regulatory and organizational requirements

Support the annual policy review cycle, tracking review dates and coordinating updates with business units

Help maintain the cybersecurity policy repository with proper version control

Assist with development of cybersecurity awareness training materials

Metrics & KPIs





Track and compile key risk indicators (KRIs) and metrics across Risks, Issues, Exceptions, and Policies/Standards workflows

Support preparation of board and management-level reporting on program metrics

Help identify trends or gaps in metrics to support continuous improvement

Required Experience & Education

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or Computer Engineering

Equivalent combination of education and professional experience will be considered

Professional Experience

2-3 years of IT/cybersecurity experience with exposure to risk and compliance

2-3 years contributing to multi-site or multi-country initiatives

Experience supporting compliance and risk management activities in IT environments

Exposure to internal audits of IT operations, applications, or projects

Basic experience with cybersecurity policy development or implementation

Familiarity with cybersecurity risk assessment methodologies

Industry & Regulatory Knowledge

Basic understanding of compliance frameworks: ISO 27001/27002, NIST Cybersecurity Framework, SOC1/SOC2, NIST AI RMF

Awareness of data privacy regulations (GDPR, CCPA, etc.)

Exposure to regulatory examinations or external audits

Basic understanding of business continuity principles

Technical Exposure

Familiarity with GRC technologies and policy management platforms

Basic knowledge of network security, cloud security, and application security concepts

Understanding of cybersecurity maturity models

Experience with security control documentation and testing support

Required Skills & Competencies

Communication & Collaboration

Strong written and oral English communication skills

Good technical writing skills for documentation

Ability to explain technical concepts to business audiences

Effective communication with colleagues and management

Analytical & Problem-Solving

Strong analytical and problem-solving abilities

Good research skills and attention to detail

Ability to support risk assessments and document findings

Proactive approach to identifying issues

Professional Qualities

Quality-focused with flexibility and adaptability

Ability to prioritize tasks effectively

Team player with collaborative approach

Eager to learn and develop professionally

Preferred Qualifications

Industry Experience

Exposure to corporate environments (financial services, telecommunications, utilities)

Real estate services industry awareness

Multi-jurisdictional compliance exposure

Technical Knowledge

Exposure to GRC technologies and policy management platforms (ServiceNow GRC, Archer, MetricStream)

Knowledge of network security, cloud security, application security,



and penetration testing concepts

Understanding of threat intelligence and its application to risk assessments

Familiarity with cybersecurity metrics and reporting

Familiarity with cybersecurity maturity models (C2M2, NIST CSF, etc.)

Experience with security control testing and validation techniques

Professional Development

Working toward relevant certifications (CISA, CISM, CRISC)

ITIL Foundation or similar process certifications

Success Metrics

Quality and timeliness of analytical support and documentation

Successful completion of assigned risk management tasks

Contribution to risk tasks including exceptions, issues, and risks.

Support quality for policy maintenance and awareness initiatives

Professional development progress and certification advancement

Why JLL

At JLL, we are collectively shaping a brighter way — for our clients, ourselves, and our fellow employees. We choose to take the more inspiring, innovative, and optimistic path on our journey toward success. What sets JLL apart is our culture of collaboration, locally and across the globe, which allows us to create transformative solutions for the real estate industry.

If this resonates with you, we encourage you to apply, even if you don’t meet all the requirements. We’re interested in getting to know you and what you bring to the table!

If this resonates with you, we encourage you to apply even if you don’t meet all of the requirements below. We’re interested in getting to know you and what you bring to the table!

Personalized benefits that support personal well-being and growth:

JLL recognizes the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritizes mental, physical and emotional health.

About JLL –

We’re JLL—a leading professional services and investment management firm specializing in real estate. We have operations in over 80 countries and a workforce of over 102,000 individuals around the world who help real estate owners, occupiers and investors achieve their business ambitions. As a global Fortune 500 company, we also have an inherent responsibility to drive sustainability and corporate social responsibility.

That’s why we’re committed to our purpose to shape the future of real estate for a better world. We’re using the most advanced technology to create rewarding opportunities, amazing spaces and sustainable real estate solutions for our clients, our people, and our communities.

Our core values of teamwork, ethics and excellence are also fundamental to everything we do and we’re honored to be recognized with awards for our success by organizations both globally and locally.

Creating a diverse and inclusive culture where we all feel welcomed, valued and empowered to achieve our full potential is important to who we are today and where we’re headed in the future. And we know that unique backgrounds, experiences and perspectives help us think bigger, spark innovation and succeed together.

📌 Cybersecurity Risk & Compliance Analyst -2 (Bengaluru)
🏢 JLL
📍 Bengaluru