other
Posted 9 hours agoSenior GRC Analyst
at Qualys
Pune, IndiaHybrid
You are nearing today's limit. Upgrade for unlimited access.
Requirements
- Qualifications Education Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Law, or related field Master’s degree preferred
- experience in GRC, technology risk, cybersecurity, or compliance Proven
- experience leading or managing enterprise‑scale GRC programs Hands‑on
- experience with audits, risk assessments, and regulatory engagements
- Experience working with global or regulated environments preferred Technical & Professional Skills Strong knowledge of: IT risk, cybersecurity risk, and control frameworks Regulatory compliance and audit practices Third‑party risk management
- Experience with GRC tools (e.g., ServiceNow GRC, RSA Archer, MetricStream, OneTrust) Ability to translate technical risks into business impact Excellent written and verbal communication skills Strong stakeholder management and influencing skills Certifications (Preferred) CRISC, CISA, CISM ISO 27001 Lead Implementer / Lead Auditor CISSP (desirable) FAIR or risk quantification certifications (optional but valued)
Experience
- Experience 8–12+ years of
Additional details
- Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Job Description: GRC Lead Role Title: Governance, Risk & Compliance (GRC) Lead Department: Security Operations- Governance, Risk and Compliance (GRC) Reporting To: Manager – GRC Location: Pune (Hybrid)
- Experience: 8–10 years Role Type: Full‑time Role Overview The GRC Lead is responsible for establishing, leading, and continuously improving the organization’s Governance, Risk, and Compliance framework across technology, information security, and business operations.
- This role ensures alignment with regulatory requirements, industry standards, and organizational risk appetite while enabling business growth and resilience.
- The GRC Lead partners closely with technology, security, legal, compliance, internal audit, procurement, and business stakeholders to proactively identify, assess, mitigate, and monitor risks, including third‑party, cyber, regulatory, and operational risks. Key