GRC Analyst

Job Title: GRC Analyst

Job Summary:

Key Roles & Responsibilities:

• Assess and prioritize information security and cybersecurity risks across the organization.
• Ensure compliance with regulatory standards and internal information security policies.
• Develop and report on key information security and compliance metrics.
• Act as Lead Implementer and Internal Auditor for ISMS and other security frameworks.
• Implement ISO policies and procedures throughout the organization.
• Manage client compliance and security assessments.
• Handle implementation and audits for standards including:
• ISO/IEC 27001:2013 & 27001:2022
• SOC 1 Type 2 & SOC 2 Type 2
• Prepare audit reports and audit plans; lead meetings and drive readiness for ISO certification.
• Conduct regular internal audits on ISMS, track non-conformities (NCs), and ensure timely closures.
• Deliver information security awareness training and incident prevention programs.
• Review and interpret Vulnerability Assessment & Penetration Testing (VAPT) reports.
• Evaluate and document Business Continuity Plan (BCP) test results.
• Coordinate with stakeholders during internal and external audits.
• Participate in projects with information security requirements.
• Conduct monthly assessments of employee compliance with security policies.
• Demonstrate hands-on experience with external audit processes and interactions.