Manager - DDQ / RFP Analyst (Security & GRC)

Gravitas Technology; Mumbai; Hybride; INR 8 913 000 - 14 006 000; Plein temps

Résumé du poste

Gravitas Technology in the UK seeks a Senior DDQ/RFP Analyst to lead end-to-end DDQs, RFPs, and client security assessments for global Financial Services clients.

You will manage intake, map questions to controls, coordinate with CISOs and regional teams, and ensure high-quality, compliant responses. The role includes mentoring junior analysts and driving process improvements.

Qualifications

• 7-12 years in DDQ/RFP, GRC, vendor risk, or InfoSec roles.
• Strong knowledge of ISO 27001, SOC 2, NIST CSF.
• Excellent written communication.
• Experience working with global stakeholders.

Responsabilités

• Lead intake, scoping, and prioritization of DDQs, RFPs, and security information requests.
• Draft, refine, and finalize responses aligned with InfoSec and Compliance guidelines.
• Map client questions to internal controls, certifications, and policies.
• Coordinate with CISO, GRC, Legal, Engineering, and regional teams.
• Perform detailed QA on responses.
• Maintain centralized repository and version control.
• Support French translation workflow.
• Improve response processes and guide junior analysts.

Connaissances

DDQ/RFP ownership

GRC knowledge

InfoSec

ISO 27001

SOC 2

NIST CSF

Description du poste

Shift: 1-10pm

Location: UK

Role Overview:

The Senior DDQ/RFP Analyst will lead the end-to-end management of due-diligence questionnaires (DDQs), RFPs, and client security assessments for global Financial Services clients.

Key Responsibilities:

• Lead intake, scoping, and prioritization of DDQs, RFPs, and security information requests.
• Draft, refine, and finalize responses aligned with InfoSec and Compliance guidelines.
• Map client questions to internal controls, certifications, and policies.
• Coordinate with CISO, GRC, Legal, Engineering, and regional teams.
• Perform detailed QA on responses.
• Maintain centralized repository and version control.
• Support French translation workflow.
• Improve response processes and guide junior analysts.

Required Skills:

• 7 - 12 years in DDQ/RFP, GRC, vendor risk, or InfoSec roles.
• Strong knowledge of ISO 27001, SOC 2, NIST CSF.
• Excellent written communication.
• Experience working with global stakeholders.