Job Summary

GRC Engineer - Bengaluru

Key Responsibilities

- Manage end-to-end Enphase SOC2 Type2 audit requirements and recurring compliance activities.

- Handling SOX ITGC audit activities including the new SEC Cyber Security Requirements.

- Work with the Internal Audit Team to address IT control gap and manage risk.

- Conduct security reviews of internal systems and identify areas of improvement.

- Manage the Governance part of Vulnerability Management. Collaborate with teams on vulnerability remediation.

- Identify and report new IS risks in the IS Risk Registers on a continuous basis. Report top risks to the management.

- Perform Vendor Security Review for new and existing vendors.

Review

Vendor agreements for Information Security related clauses.

- Create, Update, and enforce IS Policies and Procedures. Track policy compliance across the organization and conduct policy awareness sessions.

- Create and maintain an information security dashboard on in-house analytics tool.

- Drive Identity and Access Management review for critical apps.

- Provide periodic updates to internal stakeholders on adherence to IS compliance requirements

- Collaborate with SecOps, Security Engineering and Product Security Team to prioritize and address security gaps.

Required Skill and Experience

- 3-5 yrs of experience in IS GRC focusing on regulatory compliance.

- In depth understanding of security standards and frameworks (E.g. ISO 27001, NIST CSF, PCI DSS, SOX 404, SOC2, NIS2 and PCI DSS.

- Should be a Graduate - B.E/B.Tech with specialization in Computer Science, IT, IS/Cyber Security,



or relevant IT-related fields.

- Should have scored 70% and above in 10th, 12th, and Graduation.

- Knowledge of Python or similar scripting language. Knowledge of PySpark or SparkSQL is an added advantage.

- Excellent Data Analysis and Presentation skills using Microsoft Excel and PowerPoint.

- Certifications (Preferred): CompTIA Security+, CISA (not mandatory)

- Highly responsive and proven professionalism in communication, interpersonal, analytical, and organizational skills.

- Ability to synthesize a variety of data points, problem-solve, and formulate comprehensive and effective execution and risk mitigation plans.

- Desired Skill and Experience:

- High degree of creativity and out-of-the-box thinking.

- Able to execute multiple projects simultaneously in fast-paced environments.

- Ability to share knowledge and collaborate by developing content and documentation for distribution to other team members, managers, and customers.

- Ability to work in a fast-paced, collaborative, and ever-changing global setting.

- Takes responsibility and achieves results.

- Must be extremely flexible and able to manage multiple tasks and priorities on very tight deadlines.

- Outstanding organization skills.

Required Skills

- problem solve

- Python

- PowerPoint
- out of the box thinking
- organization
- changing

- Microsoft Excel
- creativity
- flexible

- PySpark
- fast paced collaborative

- Presentation
- responsive
- communication interpersonal analytical

- Data Analysis

- SparkSQL
- organizational

📌 GRC Engineer (Bengaluru)
🏢 Talent21
📍 Bengaluru