Senior Analyst – ISMS Governance, Risk & Compliance (GRC)

Job title : Senior Analyst – ISMS Governance, Risk & Compliance (GRC)

Location : Pune

Experience : 3–5 Years

Job Description :

We are looking for a Senior Analyst – ISMS GRC professional responsible for designing and managing Information Security Management System (ISMS) governance, risk, and compliance frameworks. The role involves ensuring ISO 27001:2022 compliance, supporting audits, managing risk assessments, and driving continuous improvement in security governance across the organization in alignment with regulatory and business requirements.

Key Responsibilities :

1. Implement and manage ISMS governance aligned with ISO 27001:2022 standards
2. Conduct ISMS risk assessments and define key risk indicators (KRIs)
3. Support internal and external audits, ensuring compliance readiness
4. Develop and maintain ISMS policies, procedures, and documentation
5. Collaborate with cross-functional teams including security, legal, and business units

Required Skills :

1. Strong understanding of ISMS governance, risk, and compliance frameworks
2. Experience with ISO 27001:2022 standards and audit processes
3. Knowledge of risk assessment methodologies and regulatory compliance
4. Strong documentation, reporting, and analytical skills
5. Experience in stakeholder management and cross-functional coordination

Preferred Qualification :

1. Bachelor's degree in Computer Science, Information Systems, or related field
2. Experience in regulated industries such as BFSI, healthcare, or IT services
3. Exposure to SOC1, SOC2, HITRUST, ISO 42001, or PCI DSS frameworks
4. ISO 27001 Lead Implementer / Lead Auditor certification preferred
5. Experience in client audits, due diligence, and enterprise compliance programs