IT GRC Analyst

Albemarle; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits package

Professional development resources

Job summary

Albemarle is seeking an IT GRC Analyst in Bangalore, India. The role blends in-office collaboration with remote work, focusing on IT risk, SOX 404, and governance aligned to NIST CSF, ISO 27001, and COBIT.

You will work with Internal Audit, IT leaders, and external auditors to drive evidence-based remediation and ensure audit readiness. The position requires 5–8+ years in IT compliance or audit, with familiarity in GDPR/DPDP-like privacy regimes and experience evaluating third-party assurance

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related discipline or equivalent work experience.
• 5-8+ years in IT compliance, GRC, or audit roles.
• Demonstrated SOX 404 compliance experience including ITGC testing and audit coordination.
• Experience evaluating third-party assurance artifacts such as SOC 2 Type II and ISO 27001 documentation.

Responsibilities

• Develop, implement, and manage IT risk and compliance program (ITGC, SOX 404, NIST CSF, ISO 27001, COBIT).
• Lead risk assessments, maintain risk register, report on risk and controls maturity to leadership.
• Coordinate SOX IT compliance activities including evidence collection and gap remediation.
• Coordinate with IT control owners to ensure timely testing and remediation.
• Manage third-party cybersecurity risk assessments including SOC 2 reviews and vendor questionnaires.
• Maintain IT GRC documentation and governance artefacts.
• Support audits and external assurance requests, including NIS2 and SACS-210 recertification.
• Engage with Legal and Privacy during DPIAs and DPA reviews.

Skills

SOX 404

ITGC testing

GRC frameworks

ISO 27001

Education

Bachelor's degree in CS/IS

Tools

GRC tooling

Audit-management platforms

Job description

Be an essential element to a brighter future. We work together to transform essential resources into critical ingredients for mobility, energy, connectivity and health. Join our values-led organization committed to building a more resilient world with people and planet in mind. Our core values are the foundation that make us successful for ourselves, our customers and the planet.

Job Description

Albemarle is hiring for an IT GRC Analyst. This position is hybrid (3 days per week in office) and located in Bangalore, India

What You Will Do

• Support the development, implementation, and ongoing management of the IT risk and compliance program, including IT General Controls (ITGC), SOX 404, and alignment to NIST CSF, ISO 27001, and COBIT, as well as the regional and customer-driven obligations that drive the compliance calendar, including NIS2 and SACS-210.
• Facilitate cybersecurity risk assessments, maintain the cyber risk register, track remediation to closure, and report on risk and controls maturity to IT and executive leadership, identifying trends and opportunities for improvement.
• Lead SOX IT compliance activities as one of several compliance programs, including audit evidence collection, control testing, gap analysis, deficiency remediation, and reporting to IT management and Internal Audit.
• Coordinate with control owners across IT to ensure timely completion of control testing, documentation, and remediation activities.
• Coordinate third-party cybersecurity risk assessments, including supplier security reviews, SOC 2 report evaluation, vendor security questionnaires, and remediation tracking, applying a documented intake and vendor tiering model.
• Maintain and continuously improve IT GRC documentation, including control narratives, risk-and-control matrices, and policy repositories.
• Coordinate the lifecycle of cybersecurity policies, standards, and procedures, including review cadence, exception intake and tracking, and governance documentation.
• Partner with Internal Audit, external auditors, and IT leadership to support audit cycles and ensure consistent, audit-ready evidence.
• Support customer security questionnaires, compliance attestations, cyber insurance applications, and other external assurance requests, and prepare materials for regulatory and customer assessments including NIS2 and SACS-210 recertification.
• Coordinate security participation in DPIAs, privacy reviews, and DPA reviews in partnership with Legal and Privacy.
• Assess and review change management controls as part of audit, compliance, and control effectiveness activities; CAB/CMB operational ownership and AI governance program ownership remain outside this role.

What You Bring

Required:

• Bachelor's degree in Computer Science, Information Systems, or a related discipline; or equivalent combination of education and work experience.
• 5-8+ years of experience in IT compliance, GRC, or audit roles.
• Demonstrated SOX 404 compliance experience, including ITGC testing, documentation, and audit coordination.
• Experience evaluating third-party assurance artifacts, including SOC 2 Type II reports and ISO 27001 certification documentation.
• Working knowledge of GRC frameworks: COBIT, COSO, NIST CSF, ISO 27001; exposure to EU cybersecurity regulation (NIS2) and customer or industry security assessment schemes.
• Familiarity with data privacy regulations such as GDPR, CCPA, and India's DPDP Act.

It'd be great if you also have:

• Professional certifications: CISA, CRISC, CGEIT, or equivalent (or actively pursuing).
• Experience with GRC tooling or audit-management platforms.
• Ability to communicate control gaps and remediation plans clearly to both technical and non-technical stakeholders.
• Comfortable working with cross-functional teams to drive control remediation to closure.

Benefits of joining Albemarle

• Competitive compensation
• Comprehensive benefits package
• A diverse array of resources to support you professionally and personally.

Be an essential element to a brighter future.

We are partners to one another in pioneering new ways to be better for ourselves, our teams, and our communities. When you join Albemarle, you become our most essential element and you can anticipate competitive compensation, a comprehensive benefits package, and resources that foster your well-being and fuel your personal growth. Help us shape the future, build with purpose and grow together. #LI-JH3