Hybrid IT GRC Analyst – Bengaluru (SOX/Risk)

Albemarle Corporation; Charlotte (NC); Hybrid; USD 26,000 - 44,000; Full time

Benefits offered by this job

Competitive compensation

Hybrid work model

Job summary

Albemarle Corporation is hiring an IT GRC Analyst to join a hybrid team based in Bangalore. You will develop and manage IT risk programs, oversee ITGC and SOX 404 activities, and coordinate with IT control owners to ensure timely remediation and audit readiness.

You will assess third-party cybersecurity risk, review SOC 2 and ISO 27001 materials, and contribute to policy governance and regulatory mappings including NIS2 and GDPR considerations.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related discipline, or equivalent combination of education and work experience.
• 5-8+ years of experience in IT compliance, GRC, or audit roles.
• Demonstrated SOX 404 compliance experience, including ITGC testing, documentation, and audit coordination.
• Experience evaluating third-party assurance artifacts, including SOC 2 Type II reports and ISO 27001 certification documentation.
• Working knowledge of GRC frameworks: COBIT, COSO, NIST CSF, ISO 27001; exposure to EU cybersecurity regulation (NIS2) and customer or industry security assessment schemes.
• Familiarity with data privacy regulations such as GDPR, CCPA, and India's DPDP Act.

Responsibilities

• Support the development, implementation, and ongoing management of the IT risk and compliance program, including IT General Controls (ITGC), SOX 404, and alignment to NIST CSF, ISO 27001, and COBIT.
• Facilitate cybersecurity risk assessments, maintain the cyber risk register, track remediation to closure, and report on risk and controls maturity to IT and executive leadership.
• Lead SOX IT compliance activities, including audit evidence collection, control testing, gap analysis, deficiency remediation, and reporting to IT management and Internal Audit.
• Coordinate with control owners across IT to ensure timely completion of control testing, documentation, and remediation activities.
• Coordinate third-party cybersecurity risk assessments, including supplier security reviews, SOC 2 report evaluation, vendor security questionnaires, and remediation tracking.

Skills

SOX 404 compliance

IT risk assessment

Vendor security reviews

NIST CSF

ISO 27001

GRC tooling

Education

Bachelor's degree in Computer Science or Information Systems

Tools

SOC 2 Type II

ISO 27001 documentation

Audit-management platforms

Job description

Albemarle Corporation is hiring an IT GRC Analyst to join a hybrid team based in Bangalore. You will develop and manage IT risk programs, oversee ITGC and SOX 404 activities, and coordinate with IT control owners to ensure timely remediation and audit readiness.

You will assess third-party cybersecurity risk, review SOC 2 and ISO 27001 materials, and contribute to policy governance and regulatory mappings including NIS2 and GDPR considerations.