GRC Analyst

Company Description BAMKO partners with many of the world’s most prominent brands to design, manufacture, and distribute award‑winning promotional products, branded merchandise, and packaging. Headquartered in Los Angeles, the company maintains offices across four continents and operations in five, providing a truly global footprint. BAMKO runs the largest western‑owned sourcing operation in its industry, offering strong capabilities and expertise in product manufacturing. Using consumer insights and a data‑driven approach, BAMKO focuses on creating products with purpose that extend brands, engage consumers, and solve real business challenges. Team members join a fast‑paced, innovative environment that values creativity, collaboration, and measurable impact.Role Description This full‑time, on‑site GRC (Governance, Risk, and Compliance) Analyst role is based in Dehradun. The GRC Analyst will support the design, implementation, and maintenance of governance frameworks, risk management processes, and compliance controls across BAMKO’s operations. Daily responsibilities include performing risk assessments, monitoring control effectiveness, tracking remediation activities, and maintaining documentation for audits and regulatory requirements. The role involves collaborating with IT, operations, legal, and leadership to identify risks, propose mitigation strategies, and ensure adherence to internal policies and external standards. The GRC Analyst will also assist in developing training materials, preparing reports and dashboards, and continuously improving GRC processes to support secure and compliant business growth.QualificationsStrong knowledge of governance, risk management, and compliance frameworks (e.g., ISO standards, SOC, CCPA, DPDPA, GDPR, data privacy regulations) and ability to apply them in a dynamic business environment.Experience with risk assessment, control design and testing, incident documentation, and audit readiness activities, preferably in a technology‑enabled or global organization.Proficiency with GRC tools or related platforms (e.g., risk registers, ticketing systems, policy management tools) and solid skills in Excel or other analytics tools for reporting.Excellent analytical and problem‑solving abilities, with attention to detail and the capacity to interpret complex requirements into clear, actionable controls.Effective written and verbal communication skills, including the ability to prepare concise reports, policies, and training materials for diverse stakeholders.Ability to work collaboratively with cross‑functional teams, manage multiple priorities, and maintain confidentiality and integrity in handling sensitive information.Bachelor’s degree in Information Security, Computer Science, Business, Finance, or a related field; relevant certifications (such as CISA, CRISC, ISO 27001 Lead Auditor, or similar) are an advantage.Prior experience in a GRC, audit, information security, or risk management role is preferred; familiarity with global supply