Cybersecurity GRC Analyst

Power Bridge; Arishinakunte; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Health insurance

Long-term benefit savings plan with em

Professional development opportunities

Job summary

Power Bridge is seeking a skilled Cybersecurity GRC Analyst to support external audits and governance for ISO/IEC 27001, SOC 2, NIS2, and DORA. The role requires collaborating with Security Engineering, Operations, and Architecture teams to translate regulatory mandates into actionable technical controls.

You will help design automated compliance workflows, map governance to cloud architectures, and ensure alignment with AI-related mandates.

Qualifications

• 3+ years in delivering cybersecurity GRC consultancy and 2+ in Engineering or related field.
• Deep knowledge of ISO/IEC 27001 and SOC 2; familiarity with EU regulations.
• Experience managing end-to-end audit lifecycles.
• Ability to collaborate with Security Architects and Operations to verify policy alignment.
• Strong communication skills and ability to deliver within a 6‑month window.
• AI tooling integration experience is a plus.
• Open source familiarity is an advantage.

Responsibilities

• Assist control and evidence collection for key frameworks (ISO/IEC 27001, SOC 2, NIS2, DORA).
• Support end-to-end preparation and execution of external security audits.
• Collaborate with technical teams to map governance policies to technical requirements.
• Translate EU AI Act requirements into explicit technical specs.
• Design automated compliance workflows and data collection mechanisms.
• Utilize the GRC platform for ongoing monitoring and reporting.

Skills

Regulatory & standards knowledge

Audit management

GRC tooling & automation

Cloud & security architecture literacy

Communication & stakeholder mgmt

AI tooling integration

Open source familiarity

Certifications advantage

Job description

About Us

Power Bridge is a customer centric AV & IT Infrastructure Solution & Services Provider, pivoting to bridge the Gap between innovative IT products, solutions and Customer needs.

About Us

Power Bridge is a customer centric AV & IT Infrastructure Solution & Services Provider, pivoting to bridge the Gap between innovative IT products, solutions and Customer needs.

With Offices in Bangalore (HQ) and Hyderabad, we boast the capabilities and operational excellence to execute projects for our customers across India.

Our Passionate teams across business functions work in tandem with our Industry leading Technology partners to deliver hassle-free technology upgrades projects with time bound SLA’s.

We are seeking a highly skilled, expert-level Cybersecurity GRC Analyst to provide external services until 31 October 2026. In this role, you will assist the end-to-end preparation and execution of upcoming audits, map technical controls to organizational policies, and provide collaborative support to our security architecture team. The ideal candidate possesses a strong background in traditional security frameworks and regulatory mandates, combined with the technical literacy needed to partner effectively with Security Operations, Engineering and Architecture functions to optimize compliance enforcement.

Requirements

Scope of Work

• Compliance & Frameworks: Assist the control and evidence collection management for key compliance frameworks, notably ISO/IEC 27001, SOC 2, NIS2, BSIG, and DORA.
• Audit: Assist the end-to-end preparation and execution of upcoming external security audits (including ISO/IEC 27001, ISO/IEC 27701, SOC 2).
• Architecture Support & Control Mapping: Partner with technical teams to evaluate cloud and system architectures. Translate governance policies into verifiable technical requirements and assess existing system configurations against corporate security baselines.
• AI Regulatory Control Execution: Partner with legal to translate the EU AI Act and global AI mandates into explicit technical requirements. Assess and validate that internal AI deployments, LLM-driven engineering pipelines, and product integrations conform to these technical compliance standards.
• GRC Engineering: Work with GRC Engineers to design and build automated compliance workflows, custom scripts, and data collection mechanisms to enable continuous control monitoring.
• GRC Platform Utilization.

Qualifications

• Experience: 3+ years in delivering cybersecurity GRC consultancy and 2+ in Engineering, Security Operations, Security Architect or related field
• Regulatory & Standard Expertise: Deep knowledge of ISO/IEC 27001 and SOC 2 frameworks. Comprehensive knowledge of current EU cybersecurity regulations (NIS2, CRA, DORA, EU AI Act) and ISO/IEC 42001. Familiarity with Common Criteria certification concepts and assurance requirements, including EAL4+ or comparable certification expectations, is an advantage.
• Audit Experience: Experience managing end-to-end audit lifecycles.
• Architectural Collaboration: Strong technical literacy to partner effectively with Security Architects, Engineering and Security Operations in evaluating cloud environments, identity architectures and software supply chain components to verify policy alignment
• Project Delivery Focus: Proven ability to onboard autonomously and deliver immediate project value within a defined 6-month timeline. Clear communication skills.
• AI Efficiency: Demonstrated ability to effectively leverage and integrate AI tools into daily workflows
• Open Source Knowledge: Familiarity with open-source software is an advantage
• Cybersecurity Certifications are an advantage.

Benefits

• Health insurance coverage for Father, Mother, Self, Spouse, and Kids.
• Long-term benefit savings plan with employer matching contributions.
• Opportunities for professional development and advancement within the organization.