GRC Analyst

GRC Analyst — Governance, Risk & ComplianceReports to: Portfolio CISO / VP Security | Experience: 4–5 years in GRC, audit, or compliance roles |Location: Pune| Type: Full-timeABOUT THE ROLE: The GRC Analyst will build and maintain the security governance framework across the portfolio companies. You will develop policies, maintain risk registers, manage vendor assessments, and drive compliance alignment across 17 portfolio companies with diverse regulatory obligations.KEY RESPONSIBILITIESDevelop, maintain, and communicate Information Security Policy suite across portfolioBuild and manage technology risk registers for each portfolio companyConduct annual vendor risk assessments and enforce security clausesLead data classification program rollout across all portfolio entitiesCoordinate ISO 27001 and SOC 2 compliance efforts where applicableTrack policy exception requests, risk acceptances, and control deficienciesFacilitate governance forums and prepare board/exec-level risk reportingManage security awareness training programs and phishing simulation schedulesPerform internal control assessments and maturity re-evaluations annuallyREQUIREMENTS & SKILLSBachelor's in Information Systems, Law, or Risk Management5+ years in GRC, audit, or InfoSec compliance rolesStrong knowledge of ISO 27001, NIST CSF, SOC 2, GDPR frameworksExperience with GRC tools (ServiceNow, Archer, Vanta, Drata, OneTrust)Excellent documentation and policy writing skillsAbility to translate technical risks into business language for executivesCertifications preferred: CISM, CISA, CRISC, ISO 27001 Lead ImplementerExperience in multi-entity or portfolio-level governance environmentsStrong stakeholder management and cross-functional communication skillsTOOLS & TECHNOLOGIESServiceNow GRCArcher Reporting DrataPower BIVantaMicrosoft PurviewISO 27001SOC 2NIST CSFOneTrustJira