GRC Associate

Hireologist; Bengaluru; Vor Ort; INR 600.000 - 1.000.000; Vollzeit

Zusammenfassung

Hireologist in Bengaluru seeks a GRC Associate/Information Security Analyst with 2–3 years of experience to support governance, risk, and compliance initiatives across client engagements. The role involves mapping regulatory requirements to controls, conducting risk and gap assessments, and preparing documentation and reports.

You will coordinate with client stakeholders, assist in audit readiness, and stay current with ISO 27001, SOC 2, PCI DSS, and ITGC controls.

Qualifikationen

• 2–3 years of experience in GRC, risk, compliance, or information security.
• Strong understanding of GRC concepts and control frameworks.
• Experience in risk and control assessments.
• Ability to review and interpret evidence and policies.
• Excellent documentation and report-writing skills.

Aufgaben

• Support GRC assessments, audits, and compliance engagements.
• Perform risk, control, and gap assessments against applicable frameworks.
• Review policies, procedures, processes, and control documentation.
• Identify control gaps and compliance issues and recommend corrective actions.
• Prepare Risk Registers, Control Matrices, SoA, policies, procedures, and assessment reports.
• Support implementation and assessment of information security and compliance controls.
• Coordinate with client stakeholders for evidence collection and control validation.
• Review evidence for completeness, accuracy, and compliance.
• Track findings, observations, corrective actions, and closure status.
• Support audit preparation and client readiness activities.
• Participate in client meetings, discussions, and assessment walkthroughs.
• Prepare clear and structured reports, findings, and recommendations.
• Stay updated with relevant GRC frameworks, regulations, and industry practices.
• Work with senior consultants/assessors to deliver projects within timelines.

Kenntnisse

ISO/IEC 27001

SOC 1 / SOC 2

PCI DSS

Privacy & Data Protection

IT General Controls

Information Security Controls

Internal Controls

Business Continuity

Jobbeschreibung

GRC Associate/ Information Security Analyst

Experience: 2–3 Years

About the Role

We are looking for a GRC Associate with 2–3 years of relevant experience in Governance, Risk & Compliance, Information Security, IT Risk, Internal Controls, or related areas.

The candidate will support GRC assessments, audits, compliance reviews, risk assessments, gap assessments, documentation, audit readiness, and client coordination. The role involves mapping regulatory and security requirements to organizational controls, identifying gaps, and supporting clients in achieving compliance objectives.

Key Responsibilities

• Support GRC assessments, audits, and compliance engagements.
• Perform risk, control, and gap assessments against applicable frameworks.
• Review policies, procedures, processes, and control documentation.
• Identify control gaps and compliance issues and recommend corrective actions.
• Prepare Risk Registers, Control Matrices, Statement of Applicability (SoA), policies, procedures, and assessment reports.
• Support implementation and assessment of information security and compliance controls.
• Coordinate with client stakeholders for evidence collection and control validation.
• Review evidence for completeness, accuracy, and compliance.
• Track findings, observations, corrective actions, and closure status.
• Support audit preparation and client readiness activities.
• Participate in client meetings, discussions, and assessment walkthroughs.
• Prepare clear and structured reports, findings, and recommendations.
• Stay updated with relevant GRC frameworks, regulations, and industry practices.
• Work with senior consultants/assessors to deliver projects within timelines.

Candidate Profile

• 2–3 years of relevant experience in GRC, Risk, Compliance, or Information Security.
• Strong understanding of GRC concepts and control frameworks.
• Experience in risk and control assessments.
• Ability to review and interpret policies, procedures, and evidence.
• Strong documentation and report-writing skills.
• Good analytical and problem-solving abilities.Strong verbal and written communication skills.
• Comfortable interacting with client stakeholders.
• Ability to manage multiple tasks and meet deadlines.
• Strong attention to detail.

Required Skills & Knowledge

• ISO/IEC 27001
• SOC 1 / SOC 2
• PCI DSS
• Privacy & Data Protection Frameworks
• IT General Controls (ITGC)
• Information Security Controls
• Internal Controls
• Business Continuity / Operational Resilience