GRC - Security Analyst

📋 Description

• Perform cybersecurity and technology risk assessments across systems, applications, vendors, and
• Maintain information security policies, standards, procedures, control frameworks, risk registers
• Support compliance activities aligned with frameworks and regulations such as SOC 2, HIPAA
• Assist with internal and external audits, regulatory examinations, security assessments, and
• Track audit findings, security risks, control deficiencies, exceptions, and remediation plans
• Conduct third-party and vendor security assessments, including reviewing security questionnaires

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Risk Management
• 3+ years of experience in cybersecurity, governance, risk management, compliance, IT audit, or a
• Relevant certification such as Security+, CISA, CRISC, or CGRC is preferred.
• Working knowledge of cybersecurity frameworks and standards such as HITRUST, SOC 2, PCI DSS, or
• Experience performing security risk assessments and evaluating the effectiveness of security
• Familiarity with regulatory and compliance requirements relevant to technology-driven organizations.

🎁 Benefits

• Fully remote work arrangement in India.
• Full-time opportunity within an Information Technology and cybersecurity environment.
• Exposure to enterprise-wide cybersecurity governance, risk, compliance, and audit activities.
• Hands-on experience with recognized security frameworks including SOC 2, HIPAA, HITRUST, and PCI
• Opportunity to work cross-functionally with Information Security, IT, Legal, Privacy, Internal
• Broad experience in third-party risk management, security assessments, audit readiness, and