GRC Analyst

NewSpace Research and Technologies; Bengaluru; On-site; INR 350,000 - 550,000; Full time

Job summary

NewSpace Research and Technologies Bengaluru invites a GRC Analyst (0-1 years) to join our Information Security and Compliance team. You will help ensure adherence to internal policies, industry standards, and regulatory requirements while gaining hands-on experience in governance, risk management, and compliance frameworks.

This entry-level position is ideal for a recent graduate or early-career IT/security professional who will work with senior analysts and cross-functional teams to identify

Qualifications

• Entry-level role for a recent graduate or someone early in their IT/Security career.
• Exposure to cybersecurity governance, risk management, and compliance frameworks.

Responsibilities

• Assist in documenting and maintaining information security policies, procedures, and standards.
• Prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS).
• Gather, organize, and track evidence for compliance assessments.
• Support routine information security risk assessments.
• Assist in identifying and tracking security risks in the Risk Register.
• Follow up with internal teams on status of risk remediation plans.
• Review vendor security questionnaires to assess third-party risk.
• Maintain the repository of approved vendors and track renewal/re-assessment dates.
• Assist in administering security awareness training programs and phishing simulations.
• Help compile data and metrics for GRC dashboards and reports.

Skills

GRC fundamentals

Auditing & compliance

Policy documentation

Risk assessment

Job description

GRC Analyst (0-1 years of experience) to join our growing Information Security and Compliance team. In this role, you will assist in ensuring that our organization adheres to internal policies, industry standards, and regulatory requirements.

This is an excellent entry-level opportunity for a recent graduate or someone early in their IT/Security career to gain hands‑on experience in cybersecurity governance, risk management, and compliance frameworks. You will work closely with senior analysts and cross‑functional teams to identify risks and maintain a robust security posture.

Key Responsibilities

1. Compliance & Audit Support

• Assist in documenting and maintaining information security policies, procedures, and standards.
• Help prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS).
• Gather, organize, and track evidence required for compliance assessments.
• Support the team in conducting routine information security risk assessments.
• Assist in identifying, documenting, and tracking security risks in the company’s Risk Register.
• Follow up with internal teams on the status of risk remediation plans.

3. Third-Party Risk Management (TPRM)

• Review vendor security questionnaires and documentation to assess third-party risk.
• Maintain the repository of approved vendors and track renewal/re-assessment dates.

4. Security Awareness & Reporting

• Assist in administering the company’s security awareness training programs and phishing simulations.
• Help compile data and metrics for weekly or monthly GRC dashboards and reports.

Required Skills

Auditing and Inspection ISO/IEC 27001 implementation and Certification GRC Process Audit Compliance management