GRC Analyst

Hempel A/S; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Hempel A/S is seeking an experienced Information Security leader to drive governance, risk and compliance across global operations. The role focuses on implementing policies, conducting risk assessments, and strengthening security culture through training.

Collaboration with IT and business units is essential to embed security in all processes. The candidate should have 5+ years in information security management, familiarity with ISO27001, and GRC platforms like Audit Board or ServiceNow GRC.

Qualifications

• Bachelor’s degree or higher in Information Security or related field.
• Minimum 5 years in information security management, governance, or risk management.
• Certifications such as CISSP, CRISC, CISA preferred.
• Experience with ISO27001, CIS18, ITGC.
• Familiarity with NIS2, GDPR, AI Act preferred.
• Hands-on with GRC platforms like Audit Board, ServiceNow GRC.

Responsibilities

• Ensure effective implementation and continuous improvement of policies and procedures.
• Maintain and improve Governance, Risk, and Compliance (GRC) programs.
• Conduct third party risk assessments.
• Perform risk assessments and control testing for IT systems.
• Lead information security training and awareness programs.
• Collaborate with IT and other departments to integrate security measures.
• Coordinate Business Impact Assessments and risk assessments to identify vulnerabilities.
• Provide up-to-date security reports to the CISO and stakeholders.

Skills

InfoSec management

Cyber governance

Risk management

Communication skills

Education

Bachelor’s degree or higher in Information Security

Tools

Audit Board

ServiceNow GRC

Job description

Do you have the drive and ambition to help shape a brighter future?

• Ensure effective implementation and continuous implementation of policies and procedures.
• Maintain and improve Governance, Risk, and Compliance (GRC) programs to stay aligned with legal, regulatory and contractual requirements.
• Conduct third party risk assessments.
• Performs risk assessments and control testing for IT systems.
• Lead ongoing information security training and awareness programs to strengthen organizational security culture.
• Facilitate collaboration with IT and other departments to integrate security measures into all business processes.
• Coordinate Business Impact Assessments and risk assessments to identify vulnerabilities and update mitigation strategies as necessary.
• Provide up-to-date security reports to the CISO and other stakeholders.

What are we looking for?

• Bachelor’s degree or higher in Information Security, Computer Science, or a related field.
• Minimum 5 years of experience in information security management, cybersecurity governance, or risk management.
• Relevant certifications such as CISSP, CRISC, CISA, or similar are preferred.
• Experience working with various security frameworks and standards like ISO27001 & CIS18 and ITGC.
• Experience with regulatory areas likes NIS2, GDPR and AI Act is preferred
• Hands-on experience with GRC platforms (e.g., Audit Board, ServiceNow GRC).
• Strong understanding of IT risk, compliance processes, and audit readiness.
• Project leadership and strong communication skills.
• Strong proficiency in English, both written and verbal.
• Experience in developing and conducting security training and awareness programs is an advantage.

Can you balance ambition with care for your colleagues?

• You’ll join our Digital Group Information Security global team.
• You’ll enjoy professional development and progression in a growing global company where we inspire and collaborate to build a brighter future together.
• You’ve been hired for your unique perspective - so speak up and share opportunities for improvement.
• Build a career that supports responsible practices and contributes to better business performance at the same time.

Does it sound like a match to you?

Application due
2026-09-30

Seniority Level
Mid-Senior level

Job Functions
Information Technology

Industry
Chemicals

At Hempel, you’re welcomed to a global community of +7000 colleagues around the world. A workplace built on shared trust, mutual respect and support for each other.

We’re on a mission to double our impact. To succeed, we need bright minds and team players.Which is why, from day one, your input, ideas and initiative are not only welcomed, but expected. In return,you will enjoy great opportunities for development in a growing global company – and be part of the solution by contributing to our global impact.

At Hempel, we are committed to everyone feeling safe, valued and treated equally, in an environment where each employee can bring their authentic selves to work. We believe that inclusion is key to innovation and by bringing together the most diverse perspectives and talents, we can achieve great things, together.