The Security Risk, GRC & Compliance Analyst supports the day-to-day execution of the organization's cybersecurity risk, governance and compliance program.
This role is responsible for maintaining accurate risk and compliance information, coordinating audit readiness, managing evidence, supporting security assessments and tracking remediation.
The ideal candidate is highly organized, detail-oriented and able to independently manage recurring GRC activities while appropriately escalating material risks and issues.
Key Responsibilities
Maintain the cybersecurity risk register and track remediation activities.
Support cybersecurity risk assessments and document findings.
Support SOC 2 and PCI readiness activities, where applicable.
Maintain the security control framework and documentation.
Coordinate control testing and evidence collection.
Support external audits and security assessments.
Track audit findings, remediation plans and due dates.
Manage customer security questionnaires and security due diligence requests.
Support third-party cybersecurity risk assessments.
Maintain security policies, standards and related documentation.
Prepare cybersecurity metrics, dashboards and management reporting.
Maintain audit and compliance evidence in a centralized manner.
Identify opportunities to automate evidence collection, questionnaires, reporting and recurring GRC activities.
Escalate material security, compliance or control issues to Security leadership.
Partner with Technology, Security and business teams to obtain required information and close identified gaps.
Requirements
4–7 years of experience in cybersecurity GRC, information security, risk, compliance or a related discipline.
Experience with SOC 2, cybersecurity controls and audit readiness.
Familiarity with PCI requirements preferred.
Experience managing risk registers, evidence, control testing and remediation tracking.
Strong documentation and organizational skills.
Ability to manage multiple workstreams and deadlines independently.
Strong written and verbal communication skills.
Financial services, fintech or regulated-industry experience preferred.
Familiarity with GRC platforms and automation tools preferred.
... is provided to, and easily understood by, programme leads, senior management and client committees. - Defining and managing monitoring processes for financial risks. - Building assurance and control capabilities in line with regulatory expectations and risk appetite. - Self-starter and strong team player. - Strong interpersonal ...
... Information Security Manager) Relevant certifications are preferred but not require Benefits at Anovia - Comprehensive Health Insurance policy - Employee Wellness Program with focus on mental health - Robust reward and recognition programs - Company incentive programs offered - Attractive leave policy: Holiday Leave, Maternity ...
Senior Risk & Compliance About Us “Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount . With our presence across 32 cities across globe, we support ...
... Identify, assess, document, test, and support remediation of IT risks across applications, business processes, and information systems; - Plan, manage, and execute risk-based IT assessments and audit activities for industry certifications and regulatory compliance programs, including information security risk assessments, data ...
... and Document Governance, you will execute evidence-based QA testing, surface control and documentation gaps, and deliver clear reporting to stakeholders across Risk Management and Compliance. You’ll partner closely with colleagues across Legal, Risk, Compliance, and Control functions and gain broad exposure to enterprise ...
... Controls, CRA, DORA, and AI Act. - Experience managing auditors, regulators, and senior business stakeholders. - Prior Head of Function, Director, or Senior Manager experience in a global IS/IT risk, compliance, or SoD role. Technical Skills - Expertise in SAP GRC, SAP security, SoD rulesets, UAM 3.1, SAP authorization, ...
... doesn't just get discussed. It gets shipped, it gets proven, and it gets handed off in a state someone else can run with. What Makes This Role Different Most program management roles ask you to track a roadmap someone else designed. This one asks you to build the roadmap itself - deciding what the next transformation or ...
Job Description: Program Manager – Hospital Operations Position: Program Manager – Hospital Operations Location: Mumbai Department: Operations / Strategy / Transformation Reporting To: Head of Operations / Business Head Role Purpose The Program Manager will be responsible for driving cross-functional hospital programs focused ...
... layer - which we believe will move the baseline of what merchants expect from a storefront software. Founders: 1. Rishabh Verma 2. Harmin Shah Role Charter: Program Manager (Hits & Category) As a Program Manager, you will lead strategic business programs that drive operational excellence, business growth, and cross-functional ...