GRC Analyst

About the Role

InfoeShield is looking for a motivated and detail-oriented GRC Analyst to join our cybersecurity team. This role is ideal for candidates interested in Governance, Risk & Compliance (GRC) who want to build practical experience in cybersecurity, risk management, compliance, and security assessments.

The role involves working with internal teams and stakeholders to understand IT environments, identify risks, support compliance requirements, and maintain effective security controls.

Key Responsibilities

• Support information security and risk assessments.
• Identify, document, and track risks through risk registers and remediation plans.
• Understand client IT infrastructure, processes, applications, and security controls.
• Support compliance activities aligned with ISO 27001, SOC 2, NIST, and other relevant frameworks.
• Assist with internal and external audits, including evidence collection and documentation.
• Review security controls and identify gaps against applicable requirements.
• Coordinate with stakeholders to collect information and follow up on remediation activities.
• Prepare risk, compliance, audit, and security assessment reports.
• Maintain GRC documentation, policies, procedures, and compliance records.
• Convert technical and business information into clear risk and compliance insights.

Requirements

• 0–2 years of experience in GRC, cybersecurity, IT audit, risk, compliance, or a related field.
• Freshers with relevant cybersecurity/GRC projects or internships are encouraged to apply.
• Basic understanding of information security and GRC principles.
• Familiarity with frameworks such as ISO 27001, SOC 2, or NIST.
• Strong analytical, problem-solving, and documentation skills.
• Good written and verbal communication skills.
• Ability to communicate confidently with technical and non-technical stakeholders.
• Strong attention to detail and willingness to learn.
• Ability to work independently and collaboratively.

Good to Have

• ISO 27001 Lead Auditor / Lead Implementer certification.
• ISC2 Certified in Cybersecurity (CC).
• CompTIA Security+ or equivalent certification.
• Knowledge of risk assessment methodologies and security controls.
• Exposure to GRC tools or compliance management platforms.

What We Offer

• Hands-on experience with real-world cybersecurity and GRC engagements.
• Exposure to security frameworks, risk assessments, audits, and compliance activities.
• Opportunity to work directly with stakeholders and understand real-world IT environments.
• A collaborative environment with continuous learning and professional growth.

How to Apply

Send your updated resume to support@infoeshield.com with the subject line

GRC Analyst – [Your Name]

• Please also include 2–3 lines explaining why you are interested in building your career in GRC and cybersecurity.