GRC Analyst

Required Skills Strong understanding of ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, DPDPA, NIS2 and cybersecurity governance principles. Knowledge of risk management methodologies and control frameworks. Experience in audit coordination, evidence collection, and compliance reporting. Understanding of vulnerability management and security assessment processes. Familiarity with cloud security concepts (AWS, Azure, GCP). Strong documentation, stakeholder management, and communication skills. Experience with GRC tools such as Archer, ServiceNow GRC, or similar platforms (preferred). Ability to prepare and track monthly KPIs and compliance metrics. Preferred Certifications ISO 27001 Lead Auditor / Implementer ISO 27701 Lead Auditor / Implementer ISO 42001 Lead Auditor / Implementer DPDPA CISM CISA CIPP CIPM CompTIA Security+ Preferred Experience ISO 27001 implementation and audit support Risk assessment and compliance management Vendor risk management and evaluation Cybersecurity awareness programs Security metrics, monthly KPI tracking, and dashboard preparation for management