GRC Analyst

HonorVet Technologies; India; Remote; INR 550,000 - 750,000; Part time

Job summary

HonorVet Technologies seeks a Security GRC Support Analyst to join on a remote 6-month contract. You will handle governance, risk, compliance activities, evidence collection, and security awareness under the Sr. Manager, Security GRC.

The role supports policy lifecycle, risk tracking, third-party risk, and reporting, with potential AI-assisted workflows. Strong English communication and meticulous record-keeping are essential to success.

Qualifications

• Experience in security governance, risk, and compliance processes.
• Strong written communication and documentation quality control.
• Experience with trackers, ticketing systems, dashboards, and evidence repositories.
• Ability to distinguish routine processing from matters needing judgment.
• Experience handling confidential information per data-handling requirements.
• Fluent English and cross-time-zone collaboration.

Responsibilities

• Governance and Policy Lifecycle management.
• Risk, Vulnerability, and Remediation Tracking across programs.
• Third-Party and Technology Risk Support activities.
• Security Awareness and Training programs.
• Metrics, Evidence, and Reporting development and maintenance.
• Data Governance and Compliance support activities.
• Coordinate vendor-security reviews and evidence collection.

Skills

Security governance, risk, compliance

Written communication

Trackers & ticketing

Judgment & escalation

Data handling & confidentiality

Cross-time-zone collaboration

Tools

Diligent One

UpGuard

Tenable

ServiceNow

Microsoft Purview

SharePoint

Excel

Reporting dashboards

Job description

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring.

Title: Security GRC Support Analyst

Location: India

Work Mode: Remote

Duration: 06 Months

Role Type: Contract or managed support resource

Reports To: Sr. Manager, Security GRC

Primary Purpose:

• Provide reliable operational support across core Security GRC and security awareness activities while preserving accountable decision-making with the Sr. Manager, Security GRC.

Role Summary:

• The Security GRC Support Analyst executes recurring governance, risk, compliance, vendor-risk, reporting, and security awareness work. The role organizes evidence, maintains accurate records, prepares first drafts and routine analyses, coordinates follow-up, and escalates exceptions or judgment-intensive matters.
• It is designed to operate effectively as an individual contractor, an offshore resource, or a human role supported by approved AI tools.

Key Responsibilities

The role covers:

• Governance and Policy Lifecycle
• Risk, Vulnerability, and Remediation Tracking
• Third-Party and Technology Risk Support
• Security Awareness and Training
• Metrics, Evidence, and Reporting
• Data Governance and Compliance Support
• These responsibilities include maintaining policy inventories, tracking risks and remediation, coordinating vendor-security reviews, collecting security evidence, supporting awareness campaigns and phishing simulations, preparing KPI/KRI reporting, and supporting Microsoft Purview and other compliance activities.

Required Qualifications:

• Working knowledge of security governance, risk, compliance, controls, or audit-support practices.
• Strong written communication, document-quality control, organization, and follow-through.
• Ability to work with structured trackers, ticketing systems, dashboards, questionnaires, and evidence repositories.
• Ability to distinguish routine processing from matters requiring professional judgment or escalation.
• Experience handling confidential business and security information in accordance with access and data-handling requirements.
• Professional fluency in English and the ability to collaborate effectively across time zones and functions.

Preferred Qualifications

• Experience with NIST CSF, ISO/IEC 27001, SOC 2, third-party risk management, vulnerability remediation, or policy lifecycle management.
• Experience supporting security awareness, phishing simulations, training administration, or employee communications.
• Familiarity with tools such as Diligent One, UpGuard, Tenable, ServiceNow, Microsoft Purview, SharePoint, Excel, and reporting dashboards.
• Experience using approved generative AI or workflow-automation tools for drafting, summarization, data preparation, or quality checks.

Key Point to Confirm During Screening

• The candidate should be able to perform evidence collection and organization, tracker maintenance and routine follow-up, first-draft policies/reports/questionnaires/awareness content, data reconciliation and completeness checks, campaign administration and approved communications, and procedure documentation and workflow-improvement suggestions.
• Final risk acceptance, exception approval, control-owner decisions, final vendor or technology approval, legal/privacy/employment/contractual interpretation, material changes to policy requirements or risk ratings, and external commitments or communications without required approval remain with the accountable owner.