GRC Analyst

AST Spacemobile; Bengaluru; On-site; INR 450,000 - 750,000; Full time

Job summary

AST Spacemobile is seeking a GRC Analyst with 0-1 year of experience to join its Information Security and Compliance team in Bengaluru. The role supports documentation, audits, risk management, and third-party risk processes while helping run awareness programs and generate security metrics.

The position focuses on policy maintenance, evidence collection, and collaboration across teams to ensure regulatory alignment and ongoing compliance maturity.

Qualifications

• Assist in documenting and maintaining information security policies, procedures, and standards.
• Help prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS).
• Gather, organize, and track evidence required for compliance assessments.

Responsibilities

• Assist in documenting and maintaining information security policies, procedures, and standards.
• Help prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS).
• Gather, organize, and track evidence required for compliance assessments.
• Support the team in conducting routine information security risk assessments.
• Assist in identifying, documenting, and tracking security risks in the company s Risk Register.
• Follow up with internal teams on the status of risk remediation plans.
• Review vendor security questionnaires and documentation to assess third-party risk.
• Maintain the repository of approved vendors and track renewal/re-assessment dates.
• Assist in administering the company s security awareness training programs and phishing simulations.
• Help compile data and metrics for weekly or monthly GRC dashboards and reports.

Skills

Auditing and Inspection

ISO/IEC 27001 implementation and Cert.

GRC

Process Audit

Compliance management

Job description

GRC Analyst (0-1 years of experience)

to join our growing Information Security and Compliance team. In this role, you will assist in ensuring that our organization adheres to internal policies, industry standards, and regulatory requirements.

Key Responsibilities

1. Compliance & Audit Support

• Assist in documenting and maintaining information security policies, procedures, and standards.
• Help prepare for internal and external compliance audits (e.g., SOC 2, ISO 27001, GDPR, HIPAA, or PCI-DSS).
• Gather, organize, and track evidence required for compliance assessments.

2. Risk Management

• Support the team in conducting routine information security risk assessments.
• Assist in identifying, documenting, and tracking security risks in the company s Risk Register.
• Follow up with internal teams on the status of risk remediation plans.

3. Third-Party Risk Management (TPRM)

• Review vendor security questionnaires and documentation to assess third-party risk.
• Maintain the repository of approved vendors and track renewal/re-assessment dates.

4. Security Awareness & Reporting

• Assist in administering the company s security awareness training programs and phishing simulations.
• Help compile data and metrics for weekly or monthly GRC dashboards and reports.

Required Skills

• Auditing and Inspection
• ISO/IEC 27001 implementation and Certification
• GRC
• Process Audit
• Compliance management