GRC Analyst (Cyber Security)
- Medusind
- 5 - 10 years
- Mumbai
- 3 months ago
- Email to a friend
- Report this job
Job Description
GRC Analyst
Location - Mumbai - Ahmedabad - Chennai
Key Responsibilities:
- Identifying, assessing, and mitigating potential risks across various areas of the organization, including IT security, business processes, and regulatory compliance.
- Developing, implementing, and maintaining GRC programs and processes to support compliance and risk management efforts.
- Assisting with internal and external audits, responding to audit findings, and ensuring corrective actions are implemented.
- User Access review
- Creating and maintaining policies and procedures related to governance, risk, and compliance.
- Conducting gap analysis and implementing frameworks and standards such as ISO 27001, GDPR, NIST, and SOX.
- Developing and revising policies, standards, processes, and guidelines for the organization.
- Conducting vendor risk assessments against organizational security requirements.
- Continually testing and monitoring the effectiveness of security controls.
- Conducting research to aid threat assessment or risk mitigation activities.
- Assist the department in responding to inquiries from the business units about ongoing operational compliance
- Working with various teams and departments to ensure GRC practices are integrated into business operations.
Required Skills and Qualifications:
Technical Skills & Experience:
- 5+ years of direct experience in information security, with a main emphasis on risk and compliance
- 3+ years of expertise conducting ISO 27001 and SOC 2 audits, as well as handling audit responses
- Thorough understanding of market structures, including relevant regulatory compliance requirements (ISO27001, SOC 2 , NIST, PCI, GDPR, etc.)
- Preferred Certification : CISA
- Knowledge of identity management standards, storage, and disaster recovery in the cloud and On-Premise
- Knowledge of GRC tool techniques and best practices
- Proven track record of organizing and carrying out several risk and compliance projects
- Ability to successfully manage third-party audits, compile evidence, and organize audit responses
- Effective written communication skills to develop & maintain the policies and procedures; the capability to communicate with cross-functional teams.
- Proven analytical and problem-solving abilities for managing initiatives that advance corporate goals
Education
- Bachelors degree in computer science, information systems, or Cybersecurity
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security AuditorEmployement Type: Full timeContact Details:
Company: MedusindLocation(s): Mumbai+ View Contact
Fraud Alert to job seekers!
₹ 15-20 Lacs P.A
Similar positions
Medusind
Medusind is one of the leading healthcare outsourcing service providers from India working with US clients. Medusind provides a comprehensive array of outsourcing solutions backed by robust compliance and quality processes, state-of -the -art technology, and rich domain expertise.
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in