GRC Security Consultant

Trantor; Chandigarh; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Trantor is seeking a GRC Security Analyst to support governance, risk, and compliance activities within the Group Security Team. You will bridge policy, access governance, vulnerability reporting and executive-level security reporting to ensure controls are well documented and applied across the business.

You will collaborate with Security, Cybersecurity Engineering, Infrastructure, and IT groups to maintain policy alignment with recognised frameworks, support external audits, and deliver

Qualifications

• Excellent communication with managers and peers.
• Strong policy development and documentation background.
• Demonstrated ability to improve processes.
• Strong problem-solving abilities.

Responsibilities

• Maintain and update security policies aligned with recognized frameworks.
• Support audit activities and evidence requests with external auditors.
• Assist data protection and privacy practices across the organisation.
• Audit application account access and maintain docs.
• Support onboarding docs for new apps/users.
• Track vulnerability remediation and produce reports.
• Create executive security reports and identify trends.
• Promote security awareness training and reporting.
• Coordinate weekly security team meetings and status updates.

Skills

Policy development

Documentation

Process improvement

Communication

Problem solving

Tools

Qualys

CrowdStrike

Intune

JAMF

KnowBe4

BitDefender

Job description

GRC Security Analyst

Governance, Risk & Compliance | Group Security Team

Purpose of the Job

As a GRC Security Analyst within the Group Security team, you will support the organisation's information security governance, risk, and compliance functions. The role bridges security policy, application access governance, vulnerability reporting, and executive-level security reporting, ensuring that security controls are well documented, consistently applied, and clearly communicated across the business.

You will work closely with the Security Team, Cybersecurity Engineering, Infrastructure, and other IT groups to maintain policy alignment with recognised security frameworks, support external audit activity, track vulnerability remediation, and produce reporting that gives leadership clear visibility into the organisation's security and risk posture.

Key Responsibilities

Information Security Governance and Compliance

• Maintain and update security policies in line with recognised security frameworks.


• Work with the organisation's sponsored external auditors to support audit activities and evidence requests.


• Support data protection and privacy practices across the organisation.

Application Security Governance

• Audit application account access on a regular basis to ensure appropriate access levels.


• Maintain application access documentation, ensuring records remain accurate and current.


• Support onboarding documentation and provisioning processes for new applications and users.

Vulnerability Reporting and Management

• Maintain systems reporting and tracking of IT security compliance.


• Filter vulnerability scan reports to identify findings by risk level and device.


• Create vulnerability reports segmented by application.


• Meet with system and application owner groups to guide and track remediation progress.

Security Reporting

• Gather security reports from multiple sources and extract critical statistics.


• Combine key statistics across reports into executive summary reporting.


• Identify security and risk trends from reporting data and escal ate as appropriate.

Security Awareness

• Support security awareness training initiatives and related reporting.

Schedule & Meetings

• Schedule: Monday to Friday, hours to be determined (TBD).


• Weekly meetings with the Security Team and management to provide status updates.


• Frequent meetings with the Cybersecurity Engineer and Infrastructure team.


• Ad hoc meetings with other IT groups as needed.

Required Experience & Skills

• Excellent communication skills, able to engage effectively with managers and peers.


• Strong background in policy development and documentation.


• Demonstrated process improvement skills.


• Strong problem-solving ability.

Preferred Experience & Skills

• Experience developing policy documentation aligned to security frameworks such as NIST, ISO 27001, and Cyber Essentials.


• Experience with vulnerability tracking using Qualys.

Organisation-Specific Training

• Clarity Security


• Qualys


• KnowBe4


• CrowdStrike


• BitDefender


• Intune


• JAMF