Senior Compliance Analyst-GRC – Chennai

Golden Opportunities; Chennai District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Golden Opportunities in Chennai is seeking a Senior Compliance Analyst-GRC to strengthen IT governance, risk, and compliance. The role focuses on evidence collection, audit liaison, regulatory awareness, and vendor risk assessments to ensure robust controls and continuous improvement.

The candidate will map evidence across frameworks, drive remediation, and coordinate with auditors and stakeholders to maintain a compliant security posture.

Qualifications

• 5+ years of experience in IT GRC and related areas.
• Experience managing audits and regulatory/compliance requirements.
• Ability to map evidence to multiple frameworks and maintain documentation.
• Proactive in identifying and remediating control gaps.

Responsibilities

• Lead collection, validation, and organization of audit evidence.
• Perform recurring test audits of internal controls to ensure effectiveness between formal audits.
• Act as the primary point of contact for external auditors.
• Coordinate with internal stakeholders to ensure timely delivery of evidence.
• Stay informed on current frameworks or regulatory requirements and update controls accordingly.
• Drive compliance remediation efforts and maintain documentation of our compliance.
• Map evidence across multiple frameworks and evaluate third-party vendors' security posture.
• Perform annual re-evaluations of vendors and provide recommendations for leadership.

Skills

IT GRC

Information security governance

Enterprise risk management

IT risk management

Audit management

Vendor risk management

Compliance monitoring

Gap analyses

Job description

Job Title: Senior Compliance Analyst-GRC

Location: Chennai

Candidate Specification & Job Responsibilities

Candidate should have 5+ Years of experience in IT GRC, Information security governance, enterprise risk management, IT risk management, External/ Internal audit management, vendor risk management, compliance monitoring, gap analyses.

Evidence Lifecycle Management

Lead the collection, validation, and organization of audit evidence.

Perform recurring test audits of internal controls to ensure they remain effective between formal audits.

Audit Liaison

Act as the primary point of contact for external auditors.

Coordinate with internal stakeholders to ensure timely delivery of evidence.

Policy and Awareness

Stay informed on current frameworks or regulatory requirements.

Identify control gaps when updates to frameworks or regulatory requirements are introduced.

Drive compliance remediation efforts.

Create and maintain documentation of our compliance.

Map evidence across multiple frameworks.

Vendor Risk Management

Evaluate the security and compliance posture of third-party vendors to ensure they meet EMS|MC’s security and compliance requirements.

Perform annual re-evaluations of vendors.

Provide recommendations regarding leadership third-party vendors security and compliance posture.

Update IT-security risk registry, as necessary.

Perform other duties as assigned.

Candidate should be flexible working in any shifts.