GRC (Governance, Risk & Compliance) Analyst
Job Description
Location: India Fully Remote
Job Type: Contract
Duration: 12 Months, with possibility of extension up to 24 months based on performance
Notice period:Immediate-30 days
Years of experience needed:8+ years
Work Hours
- November March: 12:30 PM 9:30 PM IST (US Standard Time)
- March November: 1:30 PM 10:30 PM IST (US Daylight Saving Time) Interview Process: 2 Rounds
Job Summary
We are seeking a GRC (Governance, Risk & Compliance) Analyst to support IT compliance, risk, governance, and control activities. The ideal candidate will have hands-on experience with SOX compliance, IT General Controls (ITGC), User Access Reviews (UAR), and IT compliance/governance processes.
Key Responsibilities
- Support SOX compliance activities and control assessments.
- Perform and support IT General Controls (ITGC) testing and reviews.
- Conduct and support User Access Reviews (UARs) and related access control activities.
- Support IT compliance, governance, risk, and controls-related activities.
- Review and assess the effectiveness of IT controls and identify gaps or exceptions.
- Assist with remediation and tracking of control deficiencies and audit findings.
- Work with various stakeholders to obtain evidence, clarify control requirements, and resolve issues.
- Investigate discrepancies and identify potential control or compliance risks.
- Maintain appropriate documentation, workpapers, and compliance records.
- Work independently with minimal supervision while managing assigned activities and deadlines.
Must-Have Qualifications
- Hands-on experience in SOX compliance.
- Strong experience with IT General Controls (ITGC).
- Experience with User Access Reviews (UAR) or similar access control reviews.
- Experience in IT Compliance, Governance, Risk, Controls, or GRC.
- Strong analytical and problem-solving skills.
- Ability to independently investigate issues and identify control gaps.
- Strong written and verbal communication skills.
Preferred Background
- IT Compliance / GRC experience is strongly preferred.
- Candidates with an IT Audit background may be considered if they have strong hands-on experience with SOX, ITGC, and compliance/control testing.
- Experience working with enterprise IT controls, risk assessments, audit findings, and remediation is preferred.
- Knowledge of governance, risk, and control frameworks is an advantage.
Key Soft Skills
- Naturally curious and inquisitive.
- Proactive in asking clarifying questions.
- A strong critical thinker.
- Comfortable challenging assumptions and investigating issues.
- Able to think beyond checklists.
- Comfortable working autonomously.
- Strong in stakeholder communication and collaboration.
Ideal Candidate Profile
Candidates with backgrounds in GRC, IT Compliance, IT Risk, SOX, ITGC, IT Controls, or IT Audit & Compliance are encouraged to apply.
Mandatory skills: SOX, ITGC, IT General Controls, User Access Review, UAR, IT Compliance, GRC, IT Risk, IT Controls, Governance, Risk Management, Control Testing, Audit, Compliance.