Senior Compliance Analyst-GRC

Golden Opportunities; Chennai District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Golden Opportunities is seeking a seasoned IT GRC professional to drive governance, risk management, and compliance initiatives. The role involves coordinating evidence for audits, liaising with external auditors, and ensuring timely delivery of documentation across multiple frameworks.

Candidates should bring 5+ years of IT GRC experience, strong knowledge of information security governance, and the ability to adapt to changing regulatory requirements.

Qualifications

• 5+ years of experience in IT GRC and information security governance.
• Experience in enterprise risk management and IT risk management.
• Experience with external/internal audit management and vendor risk management.
• Experience with compliance monitoring and gap analyses.

Responsibilities

• Lead evidence collection, validation, and organization of audit evidence.
• Perform recurring test audits of internal controls to ensure effectiveness between formal audits.
• Audit liaison – primary contact for external auditors.
• Coordinate with internal stakeholders to ensure timely delivery of evidence.
• Stay informed on current frameworks or regulatory requirements.
• Identify control gaps when updates to frameworks or regulatory requirements are introduced.
• Drive compliance remediation efforts.
• Create and maintain documentation of our compliance.
• Map evidence across multiple frameworks.
• Evaluate third-party vendors' security and compliance posture.
• Perform annual re-evaluations of vendors.
• Provide recommendations regarding leadership third-party vendors security and compliance posture.
• Update IT-security risk registry as necessary.
• Perform other duties as assigned.
• Candidate should be flexible working in any shifts.

Skills

IT GRC

Information security governance

Enterprise risk management

IT risk management

Audit management

Vendor risk management

Compliance monitoring

Gap analyses

Job description

Candidate Specification & Job Responsibilities:

• Candidate should have 5+ Years of experience in IT GRC, Information security governance, enterprise risk management, IT risk management, External/ Internal audit management, vendor risk management, compliance monitoring, gap analyses.


• Evidence Lifecycle Management Lead the collection, validation, and organization of audit evidence.


• Perform recurring test audits of internal controls to ensure they remain effective between formal audits.


• Audit Liaison Act as the primary point of contact for external auditors.


• Coordinate with internal stakeholders to ensure timely delivery of evidence.


• Policy and Awareness Stay informed on current frameworks or regulatory requirements.


• Identify control gaps when updates to frameworks or regulatory requirements are introduced.


• Drive compliance remediation efforts.


• Create and maintain documentation of our compliance.


• Map evidence across multiple frameworks.


• Vendor Risk Management Evaluate the security and compliance posture of third-party vendors to ensure they meet EMS|MC's security and compliance requirements.


• Perform annual re-evaluations of vendors.


• Provide recommendations regarding leadership third-party vendors security and compliance posture.


• Update IT-security risk registry, as necessary.


• Perform other duties as assigned.


• Candidate should be flexible working in any shifts.