Information Security GRC Analyst - II

As an Information Security GRC Analyst at Bottomline in Bangalore, your main role will involve collaborating with product and technology teams to strengthen the company's information security posture. You will work closely with the Information Security Governance, Risk and Compliance (GRC) Manager to build trust with clients on information security practices and ensure compliance with regulatory requirements and security frameworks like SWIFT, NACHA, PCI, NIST, and GLBA. Your key responsibilities will include: - Governance: - Work with key stakeholders to develop, implement, and enhance information security policies, standards, and processes aligned with regulatory requirements. - Conduct governance routines and reporting to ensure adherence to policies and standards. - Risk Management: - Establish and maintain a control library for enterprise-wide and product-specific controls. - Manage the risk register to track, prioritize, and report risks effectively. - Handle risk acceptances with suitable mitigating controls. - Compliance: - Coordinate assessments to guarantee compliance with relevant regulations and industry requirements. - Client Support: - Assess and present the information security posture to customers. - Assist in responding to information requests, reviewing contract language, and due diligence questionnaires. - Education and Awareness: - Develop and deliver information security awareness and training programs. Qualifications required for this role: - Bachelor's degree in risk management, cybersecurity, technology, or related field. - Preferred Experience & Qualifications: - Cyber or risk management certifications. - Understanding of cyber regulatory and industry frameworks such as SWIFT, NACHA, PCI, NIST, and GLBA. Bottomline welcomes individuals at all career stages and is dedicated to fostering an inclusive and open work environment as an equal opportunity employer.,