Senior Analyst GRC (Cyber Security)

Quarks Technosoft; Hyderabad; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Quarks Technosoft is seeking a Senior Analyst GRC (Cyber Security) in Hyderabad with 5-8 years of experience to drive risk management, governance and compliance programs across regions. The role collaborates with Cyber Defense, IT, Security Architecture and OT Security to align risk and compliance with global standards.

The candidate will support policy and control lifecycle, regulatory requirements and regional risk initiatives while ensuring audit readiness and transparent remediation actions.

Qualifications

• Experience executing enterprise cybersecurity risk management programs including risk identification, assessment, documentation and tracking.
• Ability to perform cybersecurity risk analyses and assist in risk prioritization based on impact, likelihood and risk tolerance.
• Experience supporting governance activities, including policy, standard and control lifecycle management.
• Experience coordinating cybersecurity compliance activities including control evidence collection, assessment support and remediation tracking.
• Assistance with internal and external cybersecurity audits by preparing documentation and tracking findings.
• Experience with cyber supply-chain and third-party risk management activities and remediation tracking.

Responsibilities

• Execute enterprise cybersecurity risk management program activities: identify, document, and track risks.
• Perform risk analyses and help prioritize risks by business impact and risk tolerance.
• Support governance activities: policy, standard, and control lifecycle management.
• Coordinate compliance tasks: evidence collection, assessments, and remediation tracking.
• Assist audits by preparing documentation and responding to inquiries; track findings.
• Support third-party risk management and regional supply-chain risk activities.
• Contribute to cybersecurity metrics, dashboards and management reporting.
• Document risk decisions, exceptions and remediation actions for audit readiness.
• Collaborate with Cyber Defense, Security Architecture, IT and OT Security to address risk requirements.

Skills

GRC

Cyber Security

Audit

Compliance

Governance

Job description

Senior Analyst GRC (Cyber Security)

• GRC
• Cyber Security
• Audit
• Compliance
• Governance

Experience: 5-8 Years

Location: Hyderabad

Shift Timings: 12-9 PM

Technical Skills

Must Haves

• Support execution of the enterprise cybersecurity risk management program, including risk identification, assessment, documentation, and tracking.
• Perform cybersecurity risk analyses and assist in risk prioritization based on business impact, likelihood, and risk tolerance.
• Support cybersecurity governance activities, including policy, standard, and control lifecycle management.
• Coordinate cybersecurity compliance activities, including control evidence collection, assessment support, and remediation tracking.Assist with internal and external cybersecurity audits by preparing documentation, responding to inquiries, and tracking findings.
• Support cyber supply-chain and third-party risk management activities, including assessments and follow-up actions.
• Contribute to cybersecurity metrics, dashboards, and management reporting.
• Document risk decisions, exceptions, and remediation actions to ensure transparency and audit readiness.
• Partner with Cyber Defense Operations, Security Architecture Engineering, IT, and OT Security to ensure risk and compliance requirements are understood and addressed.
• Support regional business and technology teams in executing cybersecurity risk and compliance activities aligned to global standards.
• Assist with region-specific regulatory and compliance requirements in coordination with the Director and other stakeholders.
• Facilitate communication between regional teams and corporate cybersecurity functions regarding risk assessments, findings, and remediation activities.
• Help ensure consistent application of cybersecurity governance processes across regions while supporting approved regional variations.

Good To Have

• Working knowledge of cybersecurity governance, risk, and compliance concepts and frameworks.
• Understanding of how cybersecurity risk impacts business operations, manufacturing environments, and supply chains.
• Familiarity with audit processes, control assessments, and remediation tracking.
• Awareness of data protection and regulatory considerations affecting global organizations.
• Understanding of how cybersecurity governance supports resilience, regulatory posture, and executive decision-making