GRC Analyst

GRC Analyst

SeamlessHR is seeking a GRC Analyst to support governance, risk management, and compliance activities, including information security controls, regulatory compliance, risk assessments, and internal and external audits.

Key Responsibilities

• Support the implementation and ongoing compliance requirements of ISO/IEC 42001.
• Assist with SOC 2 readiness, control implementation, evidence collection, and remediation tracking.
• Conduct risk assessments and maintain risk and compliance records.
• Perform control testing and monitor compliance with established requirements.
• Coordinate audit evidence collection and track findings through resolution.
• Collaborate with Engineering, Product, Legal, and other teams to implement and maintain controls.
• Maintain policies, procedures, control records, and audit documentation.
• Monitor compliance actions and remediation commitments to ensure timely closure.
• Support continuous audit readiness and broader Information Security GRC initiatives.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Risk Management, or a related field.
• 2–5 years of experience in governance, risk management, information security, IT audit, or compliance.
• Practical understanding of information security management systems, risk assessments, controls, and audit processes.
• Familiarity with ISO/IEC 27001, ISO/IEC 42001, SOC 2, and relevant data protection regulations.
• Experience maintaining risk registers, compliance documentation, audit evidence, and corrective action trackers.
• Strong analytical, documentation, communication, and stakeholder management skills.
• Relevant certifications such as ISO 27001 Lead Implementer/Lead Auditor, ISO 42001 training, CISA, or CRISC are an advantage.