GRC Analyst

SWITS DIGITAL Private Limited; Chennai; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

SWITS DIGITAL Private Limited in Chennai seeks a GRC Analyst to join the security governance team. The role requires 5+ years in GRC, IT audit, information security compliance or related governance, with strong knowledge of control frameworks and regulatory expectations.

You will review evidence, support audits, document analyses, and coordinate remediation with cross-functional teams. The ideal candidate has a Bachelor’s degree in a related field and excellent communication skills, with the

Qualifications

• Bachelor's degree in computer science, information systems, cybersecurity, risk management, or related discipline.
• 5–7 years of experience in GRC, IT audit, information security compliance, risk management or related security governance role.
• Working knowledge of ISO 27001, SOC 2, NIST CSF, NIST 800-53 GDPR, and DPDPA.
• Experience in reviewing control evidence and supporting audits, including audit request management, evidence validation, and remediation tracking.
• Strong documentation skills to record analysis, control status, audit responses, risk decisions, and remediation activities.
• Excellent verbal and written communication skills to interact with control owners, business teams, auditors, and management.
• Ability to interpret and apply policies, standards, procedures, regulatory expectations, and control obligations.
• Strong risk analysis, customer service, problem-solving, consulting, and relationship management skills.
• Ability to work independently and in a team within a matrix organization.
• Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint.
• Professional maturity and ability to manage confidential information.
• Willingness to participate in daily global conference calls.

Skills

GRC experience

Audit coordination

Documentation

Verbal & written communication

Time management

Education

Bachelor's degree in CS/IS/Cybersecurity/Risk Management

Tools

Microsoft Office Suite

Job description

• Bachelor s degree in computer science, Information Systems, Cybersecurity, Risk Management, or related discipline; or demonstrated ability to meet job requirements through a comparable number of years of applicable work experience.
• 5 7 years of experience in GRC, IT audit, information security compliance, risk management, privacy compliance or a related security governance role.
• Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53 GDPR, and DPDPA.
• Experience in reviewing control evidence and supporting internal or external audits, including audit request management, evidence validation, and remediation tracking.
• Strong documentation skills to properly record analysis, control status, audit responses, risk decisions, and remediation activities.
• Excellent verbal and written communication skills, with the ability to interact effectively with control owners, business teams, technical teams, auditors, and management.
• Ability to interpret and apply policies, standards, procedures, regulatory expectations, and control obligations in business-relevant and practical manner.
• Strong risk analysis, customer service, problem-solving, consulting, and relationship management skills.
• Ability to work independently and in a team environment, manage multiple priorities, meet deadlines, and operate effectively within a matrix organization.
• Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint.
• Professional maturity and ability to professionally manage confidential information.
• Flexibility and willingness to participate (daily) in the work processes of an international organization, including conference calls scheduled to accommodate global time zones.

Job Title - GRC Analyst

Experience-5+ years

Location- Chennai

Required Qualifications

• Bachelor s degree in computer science, Information Systems, Cybersecurity, Risk Management, or related discipline; or demonstrated ability to meet job requirements through a comparable number of years of applicable work experience.
• 5 7 years of experience in GRC, IT audit, information security compliance, risk management, privacy compliance or a related security governance role.
• Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST CSF, NIST 800-53 GDPR, and DPDPA.
• Experience in reviewing control evidence and supporting internal or external audits, including audit request management, evidence validation, and remediation tracking.
• Strong documentation skills to properly record analysis, control status, audit responses, risk decisions, and remediation activities.
• Excellent verbal and written communication skills, with the ability to interact effectively with control owners, business teams, technical teams, auditors, and management.
• Ability to interpret and apply policies, standards, procedures, regulatory expectations, and control obligations in business-relevant and practical manner.
• Strong risk analysis, customer service, problem-solving, consulting, and relationship management skills.
• Ability to work independently and in a team environment, manage multiple priorities, meet deadlines, and operate effectively within a matrix organization.
• Proficiency with Microsoft Office Suite, including Word, Excel, and PowerPoint.
• Professional maturity and ability to professionally manage confidential information.
• Flexibility and willingness to participate (daily) in the work processes of an international organization, including conference calls scheduled to accommodate global time zones.

Preferred Qualifications

• IT audit, information security, risk, or privacy certifications such as CISA, ISO 27001:2022 Lead Auditor, ISO 27001:2022 Lead Implementer, CRISC, CISSP, CDPSE, HITRUST CCSFP, or equivalent certifications.
• Working knowledge of security and compliance frameworks such as SOC 2, HITRUST, HIPAA, and PCI DSS.
• Hands-on experience supporting SOC 2 Type II audits, ISO 27001 certification or surveillance audits, validate assessments, or client assurance reviews.
• Experience with GRC, audit, risk, or privacy platforms.
• Familiarity with vendor risk management, privacy operations, data protection controls, client assurance, and global shared services environments.
• Ability to articulate the value of security controls and their potential business impacts.