GRC Analyst India

HonorVet Technologies; India; Remote; INR 600,000 - 760,000; Part time

Job summary

HonorVet Technologies seeks a Security GRC Support Analyst to provide reliable operational support across core GRC activities and security awareness, reporting to the Sr. Manager, Security GRC.

This contract role can function as an offshore resource or a human role supported by approved AI tools, and requires strong governance, risk, and compliance knowledge with excellent English communication across time zones. The position involves evidence organization, policy drafting, and KPI reporting.

Qualifications

• Knowledge of governance, risk, and compliance practices.
• Excellent written communication and documentation quality.
• Ability to manage trackers, ticketing systems, dashboards, and evidence repositories.
• Distinguish routine tasks from matters needing professional judgment or escalation.
• Handle confidential information per data-handling requirements.
• Fluent English and collaboration across time zones.

Responsibilities

• Governance and Policy Lifecycle
• Risk, Vulnerability, and Remediation Tracking
• Third-Party and Technology Risk Support
• Security Awareness and Training
• Metrics, Evidence, and Reporting
• Data Governance and Compliance Support

Skills

Security governance

Risk management

Compliance controls

English proficiency

Documentation & records

Cross-time-zone collaboration

Tools

Diligent One

UpGuard

Tenable

ServiceNow

Microsoft Purview

SharePoint

Excel

Reporting dashboards

Job description

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring.

Title: Security GRC Support Analyst
Location: India
Work Mode: Remote
Duration: 06 Months
Role Type: Contract or managed support resource
Reports To: Sr. Manager, Security GRC

Primary Purpose

• Provide reliable operational support across core Security GRC and security awareness activities while preserving accountable decision-making with the Sr. Manager, Security GRC.

Role Summary

• The Security GRC Support Analyst executes recurring governance, risk, compliance, vendor-risk, reporting, and security awareness work. The role organizes evidence, maintains accurate records, prepares first drafts and routine analyses, coordinates follow-up, and escalates exceptions or judgement‑intensive matters.
• It is designed to operate effectively as an individual contractor, an offshore resource, or a human role supported by approved AI tools.

Key Responsibilities

The role covers:

• Governance and Policy Lifecycle
• Risk, Vulnerability, and Remediation Tracking
• Third-Party and Technology Risk Support
• Security Awareness and Training
• Metrics, Evidence, and Reporting
• Data Governance and Compliance Support
• These responsibilities include maintaining policy inventories, tracking risks and remediation, coordinating vendor‑security reviews, collecting security evidence, supporting awareness campaigns and phishing simulations, preparing KPI/KRI reporting, and supporting Microsoft Purview and other compliance activities.

Required Qualifications

• Working knowledge of security governance, risk, compliance, controls, or audit‑support practices.
• Strong written communication, document‑quality control, organization, and follow‑through.
• Ability to work with structured trackers, ticketing systems, dashboards, questionnaires, and evidence repositories.
• Ability to distinguish routine processing from matters requiring professional judgment or escalation.
• Experience handling confidential business and security information in accordance with access and data‑handling requirements.
• Professional fluency in English and the ability to collaborate effectively across time zones and functions.

Preferred Qualifications

• Experience with NIST CSF, ISO/IEC 27001, SOC 2, third‑party risk management, vulnerability remediation, or policy lifecycle management.
• Experience supporting security awareness, phishing simulations, training administration, or employee communications.
• Familiarity with tools such as Diligent One, UpGuard, Tenable, ServiceNow, Microsoft Purview, SharePoint, Excel, and reporting dashboards.
• Experience using approved generative AI or workflow‑automation tools for drafting, summarization, data preparation, or quality checks.

Key Point to Confirm During Screening

• The candidate should be able to perform evidence collection and organization, tracker maintenance and routine follow‑up, first‑draft policies/reports/questionnaires/awareness content, data reconciliation and completeness checks, campaign administration and approved communications, and procedure documentation and workflow‑improvement suggestions.
• Final risk acceptance, exception approval, control‑owner decisions, final vendor or technology approval, legal/privacy/employment/contractual interpretation, material changes to policy requirements or risk ratings, and external commitments or communications without required approval remain with the accountable owner .