Senior GRC Analyst - Security & Privacy Compliance

The Senior GRC Analyst will support Williams Lea by RRD's information security governance, risk, compliance, and privacy initiatives. This role ensures coordination across global security and regulatory frameworks and other applicable standards. The ideal candidate will have a strong background in GRC, audit evidence expectations, risk management, and privacy compliance obligations.

Experience Required:

5 to 7 years

Key Responsibilities:

- Support Williams Lea by RRD's GRC program across ISO 27001, SOC 2, GDPR, DPDPA, NIST CSF, NIST 800-53, and other applicable frameworks.
- Maintain and enhance GRC documentation, including policies, standards, procedures, control narratives, evidence templates, risk registers, audit trackers, and compliance reports.
- Interpret control requirements and translate them into practical guidance for control owners, IT teams, business stakeholders, and client-facing teams.
- Perform control reviews and evidence validation to ensure completeness, accuracy, relevance, and audit readiness.
- Track compliance gaps, remediation plans, risk treatment activities, corrective actions, exceptions, and management action items through closure.
- Support internal control assessments, risk assessments, and compliance reviews across information technology and business processes.
- Coordinate internal and external audit requests, including evidence collection, evidence quality review, walkthrough preparation, auditor follow-up, and status tracking.
- Prepare audit reports, management summaries, metrics, dashboards, and compliance status updates.
- Support GDPR and DPDPA compliance activities, vendor security & privacy reviews, and remediation tracking.
- Identify, document,



and track information security and privacy risks that may impact company operations, client commitments, or regulatory obligations.

Qualification Criteria:

- Bachelor's degree in computer science, Information Systems, Cybersecurity, Risk Management, or related discipline.
- 5 – 7 years of experience in GRC, IT audit, information security compliance, risk management, privacy compliance, or a related security governance role.
- Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53, GDPR, and DPDPA.
- Experience in reviewing control evidence and supporting internal or external audits, including audit request management, evidence validation, and remediation tracking.
- Strong documentation skills to properly record analysis, control status, audit responses, risk decisions, and remediation activities.
- Excellent verbal and written communication skills, with the ability to interact effectively with control owners, business teams, technical teams, auditors, and management.
- Ability to interpret and apply policies, standards, procedures, regulatory expectations, and control obligations in a business-relevant and practical manner.
- Robust risk analysis, customer service, problem-solving, consulting, and relationship management skills.
- Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint.
- Professional maturity and ability to professionally manage confidential information.
- Flexibility and willingness to participate in the work processes of an international organization, including conference calls scheduled to accommodate global time zones.

Primary Skills:

- GRC
- audit
- risk management

Key Skills:

- GDPR
- compliance
- security frameworks
- control evidence
- stakeholder coordination

📌 GRC Analyst (Chennai)
🏢 SPECTRUM TALENT MANAGEMENT
📍 Chennai