GRC Security Analyst

Unisys; Bengaluru; On-site; INR 800,000 - 1,400,000; Full time

Job summary

Unisys Bengaluru is seeking a GRC professional to support governance, risk and compliance activities across ISO 27001, NIST CSF, CIS Controls, PCI-DSS and GDPR. You will help maintain governance trackers, risk registers, and support audits along with client reporting.

Ideal candidates have 2–4 years in information security, solid knowledge of risk assessment, policy development, and experience with MS Office. Exposure to ServiceNow or RSA Archer is a plus.

Qualifications

• 2–4 years of information security experience with governance, risk or compliance exposure.
• Familiarity with ISO 27001, NIST CSF, CIS Controls, or PCI-DSS.
• Ability to document security risks and contribute to policy development.
• Experience in audits — evidence gathering and walkthroughs.
• Experience with governance, risk and compliance documentation and reporting.

Responsibilities

• Assist development and maintenance of information security policies and procedures.
• Support risk assessments, risk registers, and remediation tracking.
• Assist audits and compliance activities across multiple frameworks.
• Maintain governance dashboards, trackers and client reporting.
• Engage with clients and stakeholders on policy, compliance and risk issues.
• Identify opportunities to improve GRC processes and tooling.

Skills

ISO 27001

NIST CSF

CIS Controls

PCI-DSS

Risk assessment

Policy development

Audit support

Vendor risk

MS Office

ServiceNow

RSA Archer

GRC tools

Tools

ServiceNow

RSA Archer

Job description

What success looks like in this role:

Key Responsibilities

Governance

Assist in the development, review, and maintenance of information security policies, standards, procedures, and guidelines in line with frameworks such as ISO 27001 and NIST CSF. Support periodic policy review cycles, ensuring documentation is kept current, version-controlled, and accessible to relevant stakeholders. Contribute to security awareness initiatives by preparing training materials, tracking completion rates, and maintaining associated records. Maintain governance trackers and document repositories, ensuring accuracy and completeness at all times. Support the preparation of governance reports, dashboards, and meeting packs for internal and client stakeholders.

Risk Management

Support the conduct of information security risk assessments under the guidance of senior team members, contributing to the identification and evaluation of threats, vulnerabilities, and business impacts. Maintain and update the risk register, ensuring risks are accurately documented, assigned, and tracked through treatment to closure. Assist with third-party and vendor risk assessments by gathering required information, reviewing responses, and documenting findings. Support business continuity and disaster recovery documentation, review cycles, and testing activities. Help prepare risk reports and escalated identified risks to senior analysts or management as appropriate.

Compliance

Support compliance activities against applicable frameworks and standards including ISO 27001, NIST CSF, CIS Controls, PCI-DSS, GDPR, and client‑specific requirements. Assist in the planning and coordination of internal and external audits — gathering evidence, preparing documentation packages, and tracking audit findings through remediation. Conduct periodic compliance checks and control walkthroughs to verify that controls are in place and operating as expected. Maintain compliance calendars and support the team in meeting regulatory deadlines, audit schedules, and periodic review obligations. Track and follow up on corrective action plans arising from audit findings, ensuring timely closure and accurate record‑keeping.

Security Control Assessment

Assist in conducting periodic assessments of security controls across people, process, and technology dimensions. Document control observations, gaps, and weaknesses identified during assessments and support the preparation of remediation recommendations. Coordinate with technical and operational teams to gather evidence of control effectiveness and maintain supporting records for audit readiness.

Reporting & Metrics

Maintain and update GRC dashboards, trackers, and metrics on a regular basis, ensuring data accuracy and completeness. Prepare routine GRC reports, meeting packs, and status updates for review by senior analysts or management before distribution to clients. Track and report on KPIs including policy compliance rates, open risk items, audit finding closure timelines, and training completion rates.

Client & Stakeholder Engagement

Support client‑facing GRC activities including governance meetings, monthly business reviews, and audit sessions under the guidance of senior team members. Respond to client queries on policy, compliance, and risk matters accurately and in a timely manner, escalating complex queries where appropriate. Maintain a professional and collaborative relationship with client security and compliance contacts.

Process Improvement

Identify and flag opportunities to improve GRC processes, templates, and documentation practices. Stay current with developments in security frameworks, regulatory requirements, and industry best practices, and share relevant updates with the team. Support the adoption of GRC tools and contribute to improving data quality and workflow efficiency within those platforms.

You will be successful in this role if you have:

• 2–4 years of experience in information security with exposure to governance, risk, and/or compliance functions.
• Working knowledge of at least one or two information security frameworks such as ISO 27001, NIST CSF, CIS Controls, or PCI‑DSS.
• Basic understanding of risk assessment methodologies and the ability to identify and document security risks with guidance.
• Familiarity with audit processes — evidence gathering, control walkthroughs, and finding documentation.
• Ability to contribute to the development and review of security policies and procedures.
• Good analytical skills with attention to detail and a structured approach to documentation and tracking.
• Proficient in Microsoft Office tools (Word, Excel, PowerPoint) for report preparation, tracker maintenance, and presentation development.
• Good written and verbal communication skills with the ability to convey security and compliance information clearly.
• Exposure to GRC platforms or ticketing tools such as ServiceNow, RSA Archer, or equivalent is an advantage.
• Experience in a managed security services or client‑facing environment is a plus.

Preferred Certifications

• CompTIA Security+
• ISO 27001 Foundation or Internal Auditor
• Certified in Risk and Information Systems Control (CRISC) — Associate level
• CISM or CISSP — Foundation / Associate level
• Any vendor‑specific GRC tool certification is a plus

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.

If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [e-mail].

US job seekers can find more information about Unisys’ EEO commitment here.

Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential.

To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com and follow us on LinkedIn.

https://www.unisys.com/unisys-legal/recruiting Notice for U.S. Applicants: Unisys is an Equal Opportunity Employer – Minorities/ Females/ Veterans/ Individuals with Disabilities/ Sexual Orientation/ Gender Identity