Cybersecurity GRC Analyst

Power Bridge; Arishinakunte; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Health insurance

Long-term savings plan with employer’匹

Professional development opportunities

Job summary

Power Bridge, a leading AV and IT infrastructure solutions provider with offices in Bangalore and Hyderabad, seeks a Cybersecurity GRC Analyst to support audits and policy mapping.

You will collaborate with security operations, engineering and architecture teams to translate regulatory mandates (ISO/IEC 27001, SOC 2, NIS2, DORA, EU AI Act) into actionable technical requirements and automation-friendly workflows.

Qualifications

• 3+ years delivering cybersecurity GRC consultancy and 2+ years in Engineering, Security Operations, Security Architecture or related field.
• Deep knowledge of ISO/IEC 27001 and SOC 2 frameworks; familiarity with EU cybersecurity regulations (NIS2, DORA, EU AI Act).
• Experience managing end-to-end audit lifecycles.

Responsibilities

• Assist control and evidence collection for ISO/IEC 27001, SOC 2, NIS2, DORA, and related frameworks.
• Support end-to-end external audits (ISO/IEC 27001, ISO/IEC 27701, SOC 2).
• Translate governance policies into verifiable technical requirements; assess cloud/system configurations.

Skills

Cybersecurity GRC

Auditing

Security Architecture

Project Delivery

Job description

About Us

Power Bridge is a customer centric AV & IT Infrastructure Solution & Services Provider, pivoting to bridge the Gap between innovative IT products, solutions and Customer needs. With Offices in Bangalore (HQ) and Hyderabad, we boast the capabilities and operational excellence to execute projects for our customers across India. Our Passionate teams across business functions work in tandem with our Industry leading Technology partners to deliver hassle-free technology upgrades projects with time bound SLA's. We are seeking a highly skilled, expert-level Cybersecurity GRC Analyst to provide external services until 31 October 2026. In this role, you will assist the end-to-end preparation and execution of upcoming audits, map technical controls to organizational policies, and provide collaborative support to our security architecture team. The ideal candidate possesses a strong background in traditional security frameworks and regulatory mandates, combined with the technical literacy needed to partner effectively with Security Operations, Engineering and Architecture functions to optimize compliance enforcement.

Requirements

Scope of Work

• Compliance & Frameworks: Assist the control and evidence collection management for key compliance frameworks, notably ISO/IEC 27001, SOC 2, NIS2, BSIG, and DORA.
• Audit: Assist the end-to-end preparation and execution of upcoming external security audits (including ISO/IEC 27001, ISO/IEC 27701, SOC 2).
• Architecture Support & Control Mapping: Partner with technical teams to evaluate cloud and system architectures. Translate governance policies into verifiable technical requirements and assess existing system configurations against corporate security baselines.
• AI Regulatory Control Execution: Partner with legal to translate the EU AI Act and global AI mandates into explicit technical requirements. Assess and validate that internal AI deployments, LLM-driven engineering pipelines, and product integrations conform to these technical compliance standards.
• GRC Engineering: Work with GRC Engineers to design and build automated compliance workflows, custom scripts, and data collection mechanisms to enable continuous control monitoring.
• GRC Platform Utilization.

Qualifications

Required Skills & Qualifications

• Experience: 3+ years in delivering cybersecurity GRC consultancy and 2+ in Engineering, Security Operations, Security Architect or related field
• Regulatory & Standard Expertise: Deep knowledge of ISO/IEC 27001 and SOC 2 frameworks. Comprehensive knowledge of current EU cybersecurity regulations (NIS2, CRA, DORA, EU AI Act) and ISO/IEC 42001. Familiarity with Common Criteria certification concepts and assurance requirements, including EAL4+ or comparable certification expectations, is an advantage.
• Audit Experience: Experience managing end-to-end audit lifecycles.
• Architectural Collaboration: Strong technical literacy to partner effectively with Security Architects, Engineering and Security Operations in evaluating cloud environments, identity architectures and software supply chain components to verify policy alignment
• Project Delivery Focus: Proven ability to onboard autonomously and deliver immediate project value within a defined 6-month timeline. Clear communication skills.
• AI Efficiency: Demonstrated ability to effectively leverage and integrate AI tools into daily workflows
• Open Source Knowledge: Familiarity with open-source software is an advantage
• Cybersecurity Certifications are an advantage.

Benefits

• Health insurance coverage for Father, Mother, Self, Spouse, and Kids.
• Long-term benefit savings plan with employer matching contributions.
• Opportunities for professional development and advancement within the organization.