GRC Analyst (Governance Risk Compliance) Jobs in Chennai Cyber Security Company

📋 Job Description

Jobzi is sourcing qualified candidates for GRC Analyst (Governance Risk Compliance) positions in Chennai's private Cyber Security Company sector. This is a full-time opportunity with a reputed Cyber Security and Information Security employer in Chennai offering competitive salary, structured growth, and a professional work environment. Tamil communication skills are preferred alongside English for professional and business interaction in Chennai.

📌 Key Responsibilities

• Support GRC consulting engagements by performing information security risk assessments, gap analyses, and control reviews against ISO 27001, SOC 2, and NIST CSF frameworks.
• Draft, review, and update information security policies, procedures, standards, and guidelines tailored to client business contexts and regulatory obligations.
• Assist in preparing clients for ISO 27001 certification audits and SOC 2 Type II examinations by coordinating evidence collection and remediation activities.
• Conduct third-party and vendor risk assessments to evaluate the security posture of client supply chain partners and cloud service providers.
• Maintain risk registers, control tracking matrices, and audit finding trackers ensuring timely remediation of identified gaps across client engagements.
• Support the implementation and configuration of GRC platforms such as RSA Archer, ServiceNow GRC, or similar tools for clients building integrated risk management programmes.
• Prepare compliance status reports, audit readiness dashboards, and management presentations communicating risk posture and remediation progress to client stakeholders.

🎓 Qualifications and Requirements

• B.E., B.Tech, MBA, or equivalent degree with zero to four years of experience in information security governance, risk, or compliance functions.
• Working knowledge of ISO 27001 Annex A controls, ISMS requirements, and the certification audit process from gap assessment through to surveillance audit.
• Familiarity with SOC 2 Trust Services Criteria, Type I and Type II report differences, and the evidence requirements for common controls.
• Understanding of IT risk assessment methodologies including risk identification, likelihood and impact scoring, and risk treatment option selection.
• Ability to draft clear, professionally structured information security policies and procedures aligned to regulatory and contractual requirements.
• Exposure to GRC tools such as RSA Archer, ServiceNow GRC, or Microsoft Compliance Manager is an advantage for GRC analyst roles.
• Strong attention to detail, organisational skills, and the ability to manage multiple concurrent compliance workstreams across different client engagements.
• Good Tamil and English communication skills for team coordination and client interaction in Chennai.

✅ Required Skills