GRC Analyst

Exxat; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Exxat is seeking a detail-oriented GRC Analyst to strengthen our security and compliance posture. You will manage regulatory frameworks, liaising with security, engineering and product teams to embed compliance into the SDLC and cloud infrastructure.

Responsibilities include audit readiness, evidence collection, KPI reporting, and supporting client-facing compliance activities. A 3–5 year track record in information security compliance is essential.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field.
• 3–5 years of information security compliance, GRC, or related role.
• Hands-on experience with two or more frameworks (SOC 2, HIPAA, GDPR, ISO 27001/27701/42001, TX-RAMP).
• Analytical, documentation, and communication skills; ability to translate technical concepts.

Responsibilities

• Evaluate compliance alignment for SOC 2, HIPAA, ISO 27001/27701/42001, TX-RAMP, GDPR and ensure audit readiness.
• Perform internal gap assessments and track remediation plans.
• Monitor ISMS and AIMS KPIs aligned with ISO 27001 and ISO 42001.
• Coordinate internal and external audits; prepare evidence and drive closure of findings.

Skills

GRC expertise

Audit coordination

Policy & documentation

Cross-functional collaboration

Education

Bachelor’s degree in Information Security/CS

Tools

ISMS

AIMS

Job description

We are looking for a detail-oriented and proactive GRC Analyst to join our growing security

and compliance team. In this role, you will be responsible for maintaining and advancing our

compliance posture across multiple regulatory frameworks, including SOC 2, HIPAA, FERPA,

ISO 27001/27701/42001, TX-RAMP, and GDPR. You will work closely with our security,

engineering and other teams to ensure our platform and operations meet the compliance

regulations - critical to our position as a trusted leader in educational and healthcare

organizations.

Key Responsibilities

• Evaluate compliance alignment for SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, TX RAMP, and GDPR, ensuring continuous audit readiness.
• Perform internal gap assessments and readiness evaluation against applicable frameworks and standards, track remediation plans.
• Monitor the Information Security Management System (ISMS) and Artificial Intelligence Management System (AIMS) KPIs and objectives in alignment with ISO 27001 and ISO 42001 requirements.
• Coordinate internal and external compliance audits - prepare evidence packages, manage auditor requests, and drive timely closure of audit findings.
• Monitor control documentation for internal and external audits.
• Collaborate with engineering, product, and DevOps teams to embed compliance requirements into the SDLC and cloud infrastructure.
• Track, measure, and report key compliance metrics and KPIs on a regular basis.
• Support client-facing compliance activities, including responding to questionnaires, RFPs, and Third Party Risk Management (TPRM) inquiries from clients and prospects.

Required Skills & Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field.
• 3 - 5 years of experience in information security compliance, GRC, or a closely related role.• Hands-on, demonstrable experience with two or more of the following frameworks:
• Experience coordinating or supporting audit readiness, evidence collection, and
• Appropriate analytical, documentation, and communication skills - translate technical
• Ability to work cross-functionally and support concurrent compliance initiatives.

SOC 2, HIPAA, ISO 27001, ISO 27701, ISO 42001, TX-RAMP, GDPR.

compliance requirements into clear guidance for both technical and non-technical