Grc Analyst

247Hire; Pune District; Hybrid; INR 800,000 - 1,400,000; Full time

Job summary

247Hire seeks a GRC Analyst to support the global IT Security Governance, Risk, and Compliance function by coordinating evidence collection and remediation tracking across key regulatory domains including GDPR, NIS2, TISAX, ISO/IEC 27001, and DPDP India.

You will work with IT, Legal, Privacy and business stakeholders to ensure compliance and readiness for regulatory audits, delivering status reports and dashboards.

Qualifications

• Bachelor's degree in Information Security, IT, Risk Management, or related field.
• Strong IT governance, risk management, and compliance knowledge.
• Familiarity with GDPR, NIS2, TISAX, and Privacy requirements.
• Awareness of AI governance and regulatory frameworks.
• 3–5 years IT GRC or cybersecurity compliance experience.

Responsibilities

• Audit Support: Assist in coordinating internal and external audits (TISAX, NIS2, GDPR, ISO), including evidence gathering and documentation.
• Evidence Management: Collect, review, and organize audit artifacts for auditors.
• Regulatory Compliance: Support GDPR, Privacy laws, AI regulation requirements, and NIS2 alignment.
• Remediation Coordination: Track remediation efforts across IT and business teams.
• Risk Assessments: Identify, document, and evaluate control effectiveness and residual risks.
• TISAX Program Support: Maintain and improve TISAX readiness, including control validation.
• Policy & Documentation: Develop and maintain security policies and procedures.
• Cross-Functional Collaboration: Work with IT, Legal, Privacy, and business stakeholders.
• Reporting: Prepare audit status reports, dashboards, and risk updates.

Skills

IT GRC

Audit

Risk management

Evidence collection

Policy & documentation

Cross-functional collaboration

Reporting

Regulatory compliance

AI governance

Education

Bachelors in Info Security

Tools

GRC tools

Audit management platforms

Evidence tracking systems

Job description

Job Description / Responsibilities:
The GRC Analyst will support the global IT Security Governance, Risk, and Compliance function by assisting in the execution of compliance programs, audit activities, and risk management processes. This role is responsible for coordinating evidence collection, supporting regulatory and framework adherence, and driving remediation tracking across key regulatory domains including TISAX, NIS2, ISO/IEC 27001, SOX, GDPR, DPDP Act (India), Privacy, and emerging AI regulationsKey Responsibilities:

• Audit Support: Assist in the coordination and execution of internal and external audits (TISAX, NIS2, GDPR, ISO), including evidence gathering, validation, and documentation.

Evidence Management: Collect, review, and organize audit artifacts to ensure completeness, accuracy, and readiness for auditors.Regulatory Compliance: Support compliance activities aligned with GDPR, Privacy laws, AI regulatory requirements, and NIS2 Directive, ensuring adherence to evolving European regulatory expectations.Remediation Coordination: Track and coordinate remediation efforts across IT and business teams, ensuring timely resolution of audit findings and risk gaps.Risk Assessments: Participate in risk assessments by identifying, documenting, and evaluating control effectiveness and residual risks.TISAX Program Support: Assist in maintaining and improving TISAX readiness, including control validation and documentation upkeep.Policy & Documentation: Support development and maintenance of security policies, procedures, and control documentation aligned with global standards.Cross-Functional Collaboration: Work with IT, Legal, Privacy, and business stakeholders to ensure compliance requirements are understood and implemented effectively.Reporting: Prepare audit status reports, compliance dashboards, and risk updates for GRC leadership.Promote a strong culture of security awareness across business and IT stakeholders.Key Performance Measures:Audit Execution: Timely and complete delivery of audit evidence with minimal rework required by auditors. Remediation Effectiveness: Percentage of audit findings remediated within agreed timelines. Compliance Readiness: Continuous readiness for regulatory audits (TISAX, GDPR, NIS2, SOX, DPDP) with minimal gaps identified. Documentation Quality: Accuracy and completeness of policies, procedures, and audit artifacts.
Stakeholder Engagement:

• Positive feedback from audit stakeholders and internal teams on coordination and responsiveness.
• Competencies and Behaviors:
• Strong attention to detail and documentation quality
• Analytical mindset with structured problem-solving skills
• Effective communication and stakeholder coordination
• Ability to manage multiple priorities in a fast-paced environment
• Proactive and continuous learning mindset in regulatory and security domains

Qualifications

• Bachelors degree in Information Security, IT, Risk Management, or related field
• Strong understanding of IT governance, risk management, and compliance principles
• Knowledge of regulatory frameworks including GDPR, NIS2, TISAX, and Privacy requirements
• Familiarity with emerging regulations impacting IT security such as AI governance and regulatory frameworks

Experience

• Years of Experience: 3–5 years of experience in IT GRC, IT audit, or cybersecurity compliance
• Audit Experience: Hands-on experience working in global delivery models or supporting multinational audits (internal/external)
• Framework Familiarity: Exposure to TISAX, NIS2, SOX, GDPR, ISO/IEC 27001, and related frameworks
• Consulting Background: Preferred experience with a Big-4 consulting or audit firm (e.g., Deloitte, PwC, EY, KPMG)
• Tools & Processes: Experience with GRC tools, audit management platforms, and evidence tracking systems
• Communication: Ability to work with cross-functional teams and present findings clearly
• Scope Factors
• People: Individual contributor supporting the global GRC team under Director leadership
• Geography: Supports global GRC efforts across all Allison operating regions.