Information Security Analyst (GRC)

Job Description: GRC Analyst

Location: Delhi/NCR (Hybrid Work Model)

Yearly (CTC) budget: ₹3,60,000 – ₹4,80,000

Position Overview:

We are seeking a dynamic and skilled GRC (Governance, Risk, and Compliance) Consultant to join our team. The ideal candidate will be ISO 27001 Lead Implementer Certified and possess extensive knowledge of various GRC frameworks. The candidate should have exceptional communication skills, be highly presentable, and have the ability to interact with clients at all levels. This role offers a hybrid work model, allowing a mix of remote work and on-site visits as well

Key Responsibilities:

Governance and Compliance:

• Assist organizations in designing, implementing, and maintaining robust GRC frameworks tailored to business needs.
• Ensure compliance with ISO 27001 standards and other relevant industry regulations.
• Develop and review policies, procedures, and risk management strategies.

Risk Management:

• Conduct risk assessments and gap analyses to identify potential security and compliance risks.
• Recommend risk mitigation strategies and monitor their implementation.

Audits and Assessments:

• Prepare and lead clients through internal and external compliance audits.
• Provide support during third-party audits and assessments.

Client Interaction:

• Engage with clients to understand their specific GRC needs and offer tailored solutions.
• Deliver presentations, training, and workshops to educate clients on GRC best practices.

Reporting and Documentation:

• Create detailed reports and dashboards to provide insights into the organization’s compliance posture.
• Maintain thorough documentation to support audits and ongoing compliance efforts.

Required Qualifications and Skills:

• Certification: ISO 27001 Lead Implementer Certified (Mandatory).
• Knowledge of Frameworks: Comprehensive understanding of major GRC frameworks such as NIST, COBIT, GDPR, HIPAA, PCI DSS, and SOC 2.
• Communication: Exceptional verbal and written communication skills in English.
• Presentation Skills: Ability to present ideas and solutions clearly and professionally to diverse audiences.
• Technical Skills: Familiarity with GRC tools and technologies is a plus.
• Analytical Mindset: Strong analytical and problem-solving abilities to address complex compliance challenges.
• Flexibility: Comfortable working in a hybrid environment and traveling to client locations within Delhi/NCR as required.

Desired Traits:

• Self-motivated and proactive approach to work.
• Strong team player with the ability to work independently when needed.
• Proven ability to manage multiple clients and projects simultaneously.

Job Details:

• Type: Full-time
• Location: Delhi/NCR (Hybrid – Work from home with site visits as needed)
• Compensation: Competitive salary based on experience and expertise.