Grc Analyst Job at Checkmarx (Pune)

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Fulltime

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chapel Hill

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer, and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

GRC Analyst

We are seeking a GRC (Governance, Risk, and Compliance) Analyst to play a key ro...

Location

United States , Minneapolis

Salary:

Not provided

Robert Half

Expiration Date

Until further notice

Requirements

3+ years of experience in Governance, Risk, and Compliance (GRC)
Strong understanding of risk management frameworks, including NIST or COSO
Knowledge of compliance standards and applicable laws
Familiarity with GRC tools and software, such as RSA Archer, MetricStream, or similar platforms
Ability to assess complex risk scenarios, identify patterns or trends, and provide actionable insights to support decision-making
Ability to identify discrepancies, non-compliance issues, or emerging risks impacting the organization
Excellent verbal and written communication skills to prepare detailed reports and interact effectively with stakeholders at various levels
Bachelor's degree in a related field is preferred

Job Responsibility

Conduct risk assessments to identify, monitor, and mitigate potential vulnerabilities
Develop and implement risk mitigation strategies and provide actionable recommendations to stakeholders
Ensure compliance with relevant laws, regulations, and standards (e.g., GDPR, PCI, ISO 27001)
Support the development and execution of cyber compliance programs, including evidence tracking, continuous monitoring, and audit preparation
Monitor and maintain internal compliance programs, track exceptions, and manage Plan of Action and Milestones (POA& M)
Design, review, and update governance frameworks, policies, and procedures to improve operational efficiency and address regulatory needs
Oversee cyber reputation management by tracking scores and making actionable recommendations for improvement
Respond to third-party security questionnaires and perform risk assessments for software and enterprise risk management
Assist with IT disaster recovery planning through documentation, tracking, and ad hoc updates
Facilitate ISO certification processes, including evidence collection and compliance tasks

What we offer

medical benefits
vision insurance
dental insurance
life and disability insurance
401(k) plan

Fulltime

Security Governance Risk & Compliance (GRC) Analyst

Here at Virtru you’ll help build a cutting edge security compliance program alig...

Location

United States , Washington, DC

Salary:

130000.00 - 180000.00 USD / Year

Virtru

Expiration Date

Until further notice

Requirements

Minimum of 5+ years of information security, IT audit and/or IT Risk Management, or GRC Analyst/Engineer experience
Deep understanding of at least few of the following: CMMC, NIST 800-53 & 800-171, FedRAMP, SOC 2, PCI, and/or other global privacy compliance frameworks
Technical acumen. Strong understanding of modern cloud technologies (AWS, GCP, Azure, etc.) and familiarity with GRC tools (Hyperproof, Vanta, Drata, etc) and SIEM tools (Datadog, Splunk)
You’re a relationship builder and have worked with both business and technical risk and understand how to translate risk to various levels of the organization
Have experience training and coaching teams to become better security and privacy practitioners
Like working on an autonomous agile team
Ability to resolve conflicts and drive issues to completion
Work independently with little or no supervision while maintaining a high level of efficiency
Hands on experience deploying and managing vulnerability scanning/cloud security posture management tools (Wiz, Prismacloud, etc.) to meet security compliance requirements
Real-world IR experience participating on security On-Call teams

Job Responsibility

Manage and implement complex controls frameworks for large systems, consisting of Cloud infrastructure and Software as a Service (SaaS) services (GCP, AWS, GitHub, Okta, etc)
Design and develop automation solutions for evidence collection across Cloud infrastructure, endpoints, and SaaS services
Conduct risk assessments across business units and processes. Identify risk findings and recommend remediation and risk mitigation strategies
Assist or implement automated controls to support risk mitigation efforts across various business units with stakeholders
Incorporate CMMC certification into Virtru’s slate of compliance assessments and ongoing monitoring activities (FedRAMP, SOC 2, PCI)
Facilitate the third-party vendor on-boarding and annual review process by evaluating the security of current and prospective partners
Participate in incident response (IR) activities, providing risk analysis and remediation support as needed
Enhance the team with your individualism, spirit, and love of learning

What we offer

A Flexible PTO policy
A $1,500 annual Learning & Development Stipend
Frequent company-sponsored team celebrations
Access to an Employee Assistance Program
Access to Headspace, a mental health app
A flat 3% contribution to your retirement account
A high degree of flexibility
Competitive compensation
Generous parental, medical, and bereavement policies
401K contribution and stock options

Fulltime

Security GRC Analyst

Plan, perform and control the activities to assure Blockchain.com’s controls are...

Location

Argentina , Buenos Aires

Salary:

Not provided

Blockchain

Expiration Date

Until further notice

Requirements

Forward-looking and strategic minded, with an eye to understanding potential risks, legal and compliance implications
Good knowledge of IT risk areas including regulatory, operational, information and energy industry specific
Good overall knowledge of application and infrastructure security control mechanisms
Advanced command of the English language
2+ years experience in audit and security certifications such as ISO, SOC and PCI
Education Four-year college degree (or equivalent)

Job Responsibility

Oversee execution and completion of applications related security controls ensuring effectiveness
Design, create and share policies, standards and procedures to ensure demonstrable regulatory /legal control. Communicate changes to internal stakeholders
Conduct preliminary self-assessment control tests of the applicable controls
Track and document remediation actions as result of audit findings
Host internal/external IT audits including walkthroughs, retaining test evidence for in scope assets and tracking action plans to either remediate or mitigate potential risk exposure findings
Conduct the quarterly User Access reviews process including information gathering, management responses tracking, and results review to follow through on corrective actions
Develop, implement and maintain a risk register. Contribute results to the corporate dashboard
Participate in new tools/partners/investors due diligences
Have an active participation in Digital projects and perform other activities assigned by the Manager

What we offer

Amazing and accessible office location in Palermo
Apple equipment
Full-time salary based on experience and meaningful equity in an industry-leading company
The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field
Flexible work culture
Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year

Fulltime

Security GRC Analyst

Juni is seeking a Security GRC (Governance, Risk, and Compliance) Analyst to pla...

Location

Sweden , Stockholm; Gothenburg

Salary:

Not provided

Juni

Expiration Date

Until further notice

Requirements

2 to 4 years of experience in information security governance, risk, or compliance roles
Demonstrated experience with compliance frameworks and regulations (e.g., PCI DSS, ISO 27001, GDPR, PSD2, EBA outsourcing and DORA)
Degree in Cybersecurity or Information Systems or similar
Knowledge of security frameworks (e.g., CIS Controls, NIST CSF)
Solid understanding of risk assessment methodologies and hands-on experience with risk registers and third-party risk management
Experience in coordinating activities for security certifications and audits
Ability to develop and track security metrics (KPIs)
Strong analytical, problem-solving, and organisational skills
Excellent communication skills, comfortable presenting to various stakeholders
A proactive and independent worker who is also a strong team player

Job Responsibility

Maintain and update core security documentation, including policies, procedures, and instructions, ensuring they remain current and relevant
Identify, collect, and analyse data to track key security performance indicators (KPIs) and metrics, generating reports and dashboards to communicate security performance to stakeholders
Maintain the risk register and support daily risk management activities with growing independence
Follow up on the remediation of risks identified in new projects, third-party engagements, and other business initiatives
Conduct thorough security posture assessments of new vendors and perform periodic reviews of existing ones
Support our 3rd party procurement process
Monitor the implementation and effectiveness of security controls across the organisation
Coordinate and support activities to maintain key security certifications, including PCI-DSS and ISO 27001
Coordinate and support the implementation of remediation plans to address identified compliance gaps
Provide support in responding to security-related questions during partner due diligence and assist in providing necessary information for cyber insurance renewals

What we offer

Work hybrid
Meet all Junis IRL at the company onsite each year
Diversity is at our core
Progress your career whether you choose to manage people or not
Stock options
Vacation 30 days
Private Health insurance
Beautiful offices in central Gothenburg and Stockholm, front row sea view

Fulltime

Cybersecurity GRC Tool Analyst

Cybersecurity GRC Tool Analyst to analyse the technology requirements of the var...

Location

Canada

Salary:

97600.00 - 181000.00 CAD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information Security, Information Technology, Risk Management or a related field, or equivalent experience
CISSP, ISO 27001 Lead Implementer, or similar certification
GRC platform certifications (e.g., Archer Certified Professional, ServiceNow GRC, Drata Admin, OneTrust Certified)
ITIL Foundation (a plus)
5-7 years of experience in Information Security, IT Governance, or Risk Management
5+ years of experience working with GRC platforms (e.g., Archer, ServiceNow GRC, AuditBoard, Drata, OneTrust, or similar)
Expert at working with Governance Risk & Compliance platforms
Strong understanding of cybersecurity and compliance frameworks (e.g., NIST CSF, ISO 27001)
Experience with basic integrations and workflow configurations
Strong organizational skills and attention to detail

Job Responsibility

Administer and maintain the GRC platform, including configurations, workflows, and reporting dashboards
Support the integration of the GRC tool with key enterprise systems (e.g., asset inventory, ticketing systems, vulnerability management tools)
Collaborate with cybersecurity, policy, risk, compliance, and IT teams to capture business requirements and translate them into functional tool capabilities
Assist in onboarding and managing control frameworks (e.g., ISO 27001, SOC 2, NIST CSF, FedRAMP) within the platform
Monitor data quality, ensure accurate reporting, and maintain platform integrity
Support control owners and stakeholders in using the GRC platform for assessments, evidence collection, and tracking remediation activities
Maintain user roles and permissions, ensuring proper access management
Document processes, workflows, and platform configurations
Provide training and guidance to end users on tool functionality and best practices
Coordinate with tool vendors for issue resolution, upgrades, and enhancements

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive benefits suite supporting physical, financial and emotional wellbeing

Fulltime

Governance, risk and compliance technical analyst intern

This is a 10 week internship program that runs from May 27th, 2026 to August 7th...

Location

United States , San Diego; San Francisco

Salary:

35.00 USD / Hour

GoFundMe

Expiration Date

Until further notice

Requirements

Confidently maintain clear and concise communication with colleagues while working in a remote or hybrid environment
Inquisitive with a solution-oriented mindset
Demonstrate excellent analytical, problem-solving, time-management, and multitasking abilities
Passionate about staying current on regulatory changes, industry guidance, and card scheme compliance

Job Responsibility

Coordinate external auditor requests and facilitate meetings with Information Technology, Engineering Teams, Security and Control Owners
Build trust center tiles to communicate internal controls to customers and regulatory bodies
Assist in evidence collection for IT control reviews, infrastructure, change management and product releases
Assist in building communication portfolios, customer journeys and feedback forms for all audit stakeholders to ensure consistency in reaching audit goals, and note potential opportunities, risks, or complications

What we offer

Competitive pay and comprehensive healthcare benefits
Financial assistance for things like hybrid work, family planning
Generous parental leave
Flexible time-off policies
Mental health and wellness resources
Learning, development, and recognition programs

Fulltime

Grc Analyst

Checkmarx

Location:
India , Pune

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
March 25, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Grc Analyst

Senior GRC Analyst

Senior GRC Analyst

GRC Analyst

Security Governance Risk & Compliance (GRC) Analyst

Security GRC Analyst

Security GRC Analyst

Cybersecurity GRC Tool Analyst

Governance, risk and compliance technical analyst intern

Grc Analyst

Checkmarx

Location:India , Pune

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:March 25, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Grc Analyst

Senior GRC Analyst

Senior GRC Analyst

GRC Analyst

Security Governance Risk & Compliance (GRC) Analyst

Security GRC Analyst

Security GRC Analyst

Cybersecurity GRC Tool Analyst

Governance, risk and compliance technical analyst intern

Location:
India , Pune

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
March 25, 2026