GRC Analyst- Bengaluru-Contract Role_ Immediate Joiner Required

CIEL HR; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

CIEL HR is seeking a GRC Analyst in Bengaluru with 4-5 years of experience to lead our Third-Party Risk Management program. You will ensure vendor security standards and privacy requirements, operating at the intersection of security, legal, and procurement.

Key responsibilities include liaising with partners, conducting security reviews of third-party vendors, and reviewing DPAs with legal to ensure proper security controls and data protection measures are in place.

Qualifications

• 4+ years of GRC experience
• Experience with third-party risk management
• Familiarity with ISO 27001/PCI DSS is a plus

Responsibilities

• Liaise with partner to understand engagement scope
• Conduct end-to-end security reviews of third-party vendors using industry-standard questionnaires
• Review data flow diagrams and perform architecture reviews
• Partner with Legal to review DPAs and ensure technical and organizational security measures
• Identify gaps in vendor security postures and negotiate remediation plans before contracts are signed
• Support internal audits and risk register updates as needed

Job description

Role: GRC Analyst

Experience: 4-5 Years

Relevant Experience in GRC: 4+ Years

Notice Period: Immediate Joiners Only

Job Location: Bengaluru

We are looking for a GRC Analyst with 4-5 years of experience to lead our Third-Party Risk Management (TPRM) program. You will be responsible for ensuring that our vendors meet our security standards and data privacy requirements. This role sits at the intersection of security, legal, and procurement.

Key Responsibilities (Must Have)

• Understanding the Engagement by liaising with the partner.
• Vendor Assessment: Conduct end-to-end security reviews of third-
• party vendors using industry-standard questionnaires.
• Clear understanding of data flow diagrams and architecture reviews.
• DPA Review: Partner with the Legal team to review Data Processing
• Agreements (DPAs), ensuring appropriate technical and organizational
• measures are in place.
• Risk Mitigation: Identify gaps in vendor security postures and
• negotiate remediation plans before contract signatures. Key

Responsibilities (Good to have)

• Internal Audit: Support internal audit cycles (ISO 27001/PCI DSS) by gathering evidence and performing gap analyses on internal controls.
• Risk Register Management: Maintain the corporate risk register,ensuring vendor risks are quantified and reported to stakeholders.