GRC Analyst / Associate (1–3 Years Experience)

• We are seeking a motivated GRC Analyst with 1–3 years of experience to support our Governance, Risk & Compliance function. The ideal candidate will assist in risk assessments, compliance monitoring, policy management, audit support, and implementation of security & compliance frameworks in organization.

Key Responsibilities:

• Assist in conducting

  risk assessments

  , identifying gaps, and tracking remediation activities.
• Support development, review, and maintenance of

  policies, procedures, and standards

  .
• Perform periodic

  compliance checks

  against regulatory and internal requirements.
• Assist in managing

  internal and external audits

  , including collecting evidence and preparing documentation.
• Work with cross-functional teams to implement

  controls

  aligned with frameworks such as ISO 27001, SOC 2, NIST, GDPR, etc.
• Monitor and report compliance status, risks, and issues to senior stakeholders.
• Maintain and update the

  risk register

  and compliance dashboards.
• Support

  vendor risk management

  activities, including assessments and documentation review.
• Help in developing

  awareness and training

  content related to security and compliance.
• Participate in incident response activities and ensure proper documentation.

Required Skills & Qualifications:

• Bachelor’s degree in Information Security, Computer Science, Business, or a related field.

• 1–3 years

  of experience in GRC, risk management, or compliance.
• Basic understanding of

  information security frameworks

  (ISO 27001,DPDPA, SOC 2, NIST, HIPAA, GDPR, etc.).
• Strong analytical, documentation, and reporting skills.
• Ability to work with multiple stakeholders and manage tasks independently.
• Good communication and presentation skills.

Preferred Qualifications: Beginner-level cybersecurity certifications.

Experience in audit support, risk assessments, or compliance programs.