The median GRC / Compliance Analyst (Cyber) salary in India is ₹10.5L in 2026, with a typical range from ₹9.8L to ₹10.9L. Pay has moved +13.0% year-on-year. Bengaluru currently leads city pay at ₹11L. This is base salary for permanent employees. Contracting instead? See day rates for this role below.
What does A GRC / Compliance Analyst (Cyber) do?
A GRC / Compliance Analyst (Cyber) is responsible for managing governance, risk, and compliance programs for cybersecurity, mapping controls to frameworks like ISO 27001, SOC 2, and India's DPDP Act, and coordinating audits and risk assessments.
Day-to-day responsibilities
- Maintaining control documentation and risk registers
- Coordinating internal and external audits
- Tracking remediation of findings
- Advising business teams on DPDP Act and RBI/SEBI compliance requirements
Low demand+14% ISO 27001 lead implementer/auditor+16% DPDP Act and data privacy compliance+12% SOC 2 and NIST CSF frameworks