Information Security GRC Analyst

Perydot; Mumbai; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Perydot is seeking an Information Security GRC Analyst in Mumbai to support governance, risk, and compliance initiatives. You will coordinate audits and regulatory efforts, track risks, and drive remediation actions while preparing compliance reports and dashboards.

The role requires 2+ years in GRC/ISMS, familiarity with ISO/IEC 27001 and RBI guidelines, and strong documentation and stakeholder management skills. Proficiency in Excel and PowerPoint is essential for reporting.

Qualifications

• Minimum 2 years in Information Security GRC, ISMS, or related domain.
• Working knowledge of ISO/IEC 27001 and ISMS.
• Experience with RBI cybersecurity/regulatory requirements.
• Experience in audit coordination and remediation tracking.
• Strong documentation, reporting, and stakeholder management skills.
• Proficiency with Excel and PowerPoint for reporting.

Responsibilities

• Coordinate audit, regulatory, and compliance activities.
• Track security risks, audit observations, and remediation actions.
• Prepare compliance reports and dashboards.
• Collaborate with Business, Technology, Risk, Compliance, and Audit teams.
• Ensure adherence to internal policies and industry best practices.

Skills

Information Security GRC

ISO/IEC 27001

Regulatory compliance

Audit coordination

Reporting & dashboards

Stakeholder management

Analytical thinking

Communication skills

Tools

Excel

PowerPoint

Job description

Role Overview

The Information Security GRC Analyst is responsible for supporting the organizations Information Security Governance, Risk, and Compliance (GRC) initiatives by coordinating audit, regulatory, and compliance activities. The role involves tracking security risks, audit observations, remediation actions, and regulatory requirements while ensuring timely closure through effective stakeholder coordination.

The individual will work closely with Business, Technology, Risk, Compliance, and Audit teams to support ISO 27001 and ISMS activities, maintain governance documentation, prepare compliance reports and dashboards, and assist in ensuring adherence to internal policies, regulatory expectations, and industry best practices.

Required Skills & Qualifications

• Minimum 2 years of experience in Information Security Governance, Risk & Compliance (GRC), Information Security, ISMS, or a related domain.
• Working knowledge of ISO/IEC 27001, Information Security Management Systems (ISMS), and regulatory compliance requirements.
• Familiarity with regulatory frameworks and guidelines, including RBI cybersecurity and IT governance requirements.
• Experience in audit coordination, compliance tracking, and remediation management.
• Strong documentation, reporting, and stakeholder management skills.
• Proficiency in Microsoft Excel, PowerPoint, and reporting/dashboard preparation.
• Excellent communication, coordination, and analytical skills.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.