GRC Analyst

Position:
GRC Analyst

Company:
Paxos

Location:
Remote - India

Employment type:
Full time

Work Arrangement:
Remote

Short Summary:
The GRC Analyst supports the development, implementation, and maintenance of governance, risk management, and compliance programs within the organization, focusing on assessing security risks and ensuring compliance with policies and regulations.

Responsibilities:
- Work with cross-functional teams, including Information Security, IT, Legal, Privacy, Internal Audit, and Business Operations.
- Identify risks, track remediation activities, and improve the organization’s overall risk and compliance posture.

Requirement:
- Experience in Governance, Risk, and Compliance (GRC), information security, IT risk management, or cybersecurity compliance roles.
- Hands-on experience performing security risk assessments, control assessments, compliance and Privacy reviews.
- Experience with security frameworks and standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or similar regulatory requirements.
- Experience supporting internal and external audits, including evidence collection, control validation, and remediation tracking.
- Experience developing, reviewing, and maintaining security policies, standards, procedures, and compliance documentation.
- Experience managing risk registers, control matrices, audit findings, and corrective action plans.
- Experience conducting third-party/vendor security risk assessments and reviewing supplier compliance documentation.

Benefits:
- Not specified.