What does A GRC / Compliance Analyst (Cyber) do?
A GRC / Compliance Analyst (Cyber) is responsible for managing governance, risk, and compliance programs for cybersecurity, mapping controls to frameworks like ISO 27001, SOC 2, and India's DPDP Act, and coordinating audits and risk assessments.
Day-to-day responsibilities
- Maintaining control documentation and risk registers
- Coordinating internal and external audits
- Tracking remediation of findings
- Advising business teams on DPDP Act and RBI/SEBI compliance requirements
Low demand+14% ISO 27001 lead implementer/auditor+16% DPDP Act and data privacy compliance+12% SOC 2 and NIST CSF frameworks