GRC Analyst

IDX DIGITAL; Vadodara; Sur place; INR 700 000 - 1 300 000; Plein temps

Avantages offerts par ce poste

29 paid annual leave days

10 festival holidays

Family Insurance Plan

Accident Insurance Plan

Wellness Sessions

Rewards & Recognition

Charity initiatives participation

Cultural and Sporting Events

Résumé du poste

IDX DIGITAL is seeking an experienced GRC Analyst to support governance, risk, and compliance functions across information security, privacy, and AI governance obligations.

You will coordinate audits, assess risk, develop policies, and drive continuous improvement of the governance framework to meet regulatory requirements and client due diligence expectations.

Qualifications

• Understanding of Governance, Risk, and Compliance (GRC) principles.
• Knowledge of information security fundamentals and risk management concepts.
• Familiarity with ISO 27001 and related standards.
• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in a cross-functional environment.

Responsabilités

• Support and maintain the organizations compliance programs and frameworks (ISO 27001, ISO 27701, ISO 42001, ISO 9001).
• Plan, coordinate, and support internal and external audits; track observations and corrective actions.
• Review client security questionnaires, RFPs, due diligence requests, and security requirements.
• Conduct supplier and third-party risk assessments including cloud services and vendors.
• Perform risk assessments for information security, privacy, AI, and business operations.

Connaissances

GRC principles

Information security basics

Risk management concepts

ISO 27001 knowledge

Analytical skills

Communication skills

Formation

Bachelor's degree in IT/CS/Cyber Security/Info Systems/Business Admin

Outils

Excel

Word

PowerPoint

Description du poste

Job Description:

The GRC Analyst is responsible for supporting and managing the organizations Governance, Risk, and Compliance (GRC) activities to ensure compliance with information security, privacy, AI governance, and regulatory requirements. The role involves coordinating audits, conducting risk assessments, managing compliance initiatives, responding to client security due diligence, evaluating third-party risks, developing policies and procedures, and driving continuous improvement of the organizations governance framework.

Requirements

• Good understanding of Governance, Risk, and Compliance (GRC) principles.
• Knowledge of information security fundamentals and risk management concepts.
• Understanding of ISO management systems, particularly ISO 27001.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Strong documentation and report-writing abilities.
• Ability to manage multiple priorities and work effectively in a cross-functional environment.
• Good stakeholder management and interpersonal skills.
• Proficiency in Microsoft Office applications, particularly Excel, Word, and PowerPoint.
• Bachelors degree in Information Technology, Computer Science, Cyber Security, Information Systems, Business Administration, or a related field.
• Basic understanding of cloud platforms such as AWS, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), including identity and access management, networking, storage, compute, and cloud security concepts.
• Familiarity with information security frameworks and standards such as ISO 27001, ISO 27701, ISO 42001, SOC 2, NIST Cybersecurity Framework, and CIS Controls.
• Understanding of privacy regulations such as GDPR, UK GDPR, DPDP Act, CCPA/CPRA, or similar global privacy laws.
• Knowledge of risk assessments, audit methodologies, supplier risk management, and security governance.
• Familiarity with AI governance, responsible AI principles, and AI risk management is desirable.

Responsibilities

• Support and maintain the organizations compliance programs, including ISO 27001, ISO 27701, ISO 42001, ISO 9001, and other applicable standards and frameworks.
• Plan, coordinate, and support internal and external audits, including tracking observations, corrective actions, and continual improvement initiatives.
• Review and respond to client security questionnaires, RFPs, due diligence requests, and contractual security requirements.
• Conduct supplier and third-party risk assessments, including cloud services, SaaS platforms, AI tools, and technology vendors.
• Perform information security, privacy, AI, and business risk assessments, including DPIAs, AI Impact Assessments (AIIAs), and risk register maintenance.
• Develop, review, and maintain policies, procedures, standards, guidelines, and compliance documentation.
• Monitor applicable regulatory and industry requirements, including GDPR, UK GDPR, DPDP Act, CCPA/CPRA, and other relevant privacy and security regulations.
• Collaborate with Engineering, Infrastructure, Product, Legal, HR, Sales, and other business teams to implement security, privacy, and compliance controls.
• Support governance activities for cloud environments, AI solutions, and emerging technologies.
• Track compliance metrics, audit evidence, risk treatment plans, and management reports.
• Identify compliance gaps and recommend practical remediation and process improvement initiatives.
• Support security awareness and compliance training across the organization.
• Stay informed of emerging regulatory requirements, industry standards, cybersecurity threats, and best practices.

Benefits

• 29paidannualleavedays.
• 10Festivalholidays(including1optionalHolidayforyourspecialdaythroughtheyear).
• FamilyInsurancePlan.
• AccidentInsurancePlan.
• RegularWellnessSessions.
• RegularRewards&Recognition.
• Opportunitytoparticipateincharityinitiativesandvolunteering.
• Opportunity to participate in Cultural and Sporting Events.