GRC Analyst

Exxat; Bengaluru; On-site; INR 1,100,000 - 1,800,000; Full time

Job summary

Exxat is seeking a detail-oriented GRC Analyst to advance our compliance posture across SOC 2, HIPAA, ISO 27001/27701/42001, TX-RAMP, and GDPR.

You will collaborate with security, engineering, and product teams to embed compliance into the SDLC and cloud infrastructure, monitor ISMS/AIMS KPIs, and drive timely audit closures. Strong analytical, documentation, and cross-functional communication skills are essential.

Qualifications

• Demonstrated ability to translate complex regulatory requirements into actionable guidance.
• Strong analytical, documentation, and communication skills.
• Experience analyzing and improving compliance programs and controls.
• Ability to work across security, product, and engineering teams.

Responsibilities

• Evaluate and maintain compliance across SOC 2, HIPAA, ISO 27001/27701/42001, TX-RAMP, GDPR.
• Lead gap assessments and remediation tracking for audits.
• Monitor ISMS and AIMS KPIs and support audit readiness.
• Coordinate internal and external audits and manage evidence packages.

Skills

GRC experience

Regulatory compliance

Audit coordination

Cross-functional collaboration

Education

Bachelor's degree in Information Security / CS / IS

Job description

We are looking for a detail-oriented and proactive GRC Analyst to join our growing security and compliance team. In this role, you will be responsible for maintaining and advancing our compliance posture across multiple regulatory frameworks, including SOC 2, HIPAA, FERPA, ISO 27001/27701/42001, TX-RAMP, and GDPR. You will work closely with our security, engineering and other teams to ensure our platform and operations meet the compliance regulations - critical to our position as a trusted leader in educational and healthcare organizations.

Key Responsibilities

• Evaluate compliance alignment for SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, TX RAMP, and GDPR, ensuring continuous audit readiness.
• Perform internal gap assessments and readiness evaluation against applicable frameworks and standards, track remediation plans.
• Monitor the Information Security Management System (ISMS) and Artificial Intelligence Management System (AIMS) KPIs and objectives in alignment with ISO 27001 and ISO 42001 requirements.
• Coordinate internal and external compliance audits - prepare evidence packages, manage auditor requests, and drive timely closure of audit findings.
• Monitor control documentation for internal and external audits.
• Collaborate with engineering, product, and DevOps teams to embed compliance requirements into the SDLC and cloud infrastructure.
• Track, measure, and report key compliance metrics and KPIs on a regular basis.
• Support client-facing compliance activities, including responding to questionnaires, RFPs, and Third Party Risk Management (TPRM) inquiries from clients and prospects.

Required Skills & Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field.
• 3 - 5 years of experience in information security compliance, GRC, or a closely related role.
• Hands-on, demonstrable experience with two or more of the following frameworks: SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, TX-RAMP, GDPR.
• Experience coordinating or supporting audit readiness, evidence collection, and.
• Appropriate analytical, documentation, and communication skills - translate technical compliance requirements into clear guidance for both technical and non-technical.
• Ability to work cross-functionally and support concurrent compliance initiatives.