GRC Analyst/Manager - Technology & Engineering Services Firm

Were looking for a dynamic and experienced professional to lead enterprise-wide governance, risk, and compliance initiatives. This is a strategic leadership role ideal for someone with deep GRC knowledge, audit expertise, and a strong understanding of global compliance frameworks.

Location Delhi, India

Your Future Employer A leading global technology and engineering services organization with operations across the US, UK, Middle East, and APAC. The company specializes in delivering digital transformation, platform engineering, and innovation-driven solutions to Fortune 500 clients.

Responsibilities

- Design and enhance IT governance frameworks based on ISO and global compliance standards.

- Lead full-cycle implementation of ISO 27001, SOC 2 Type II, PCI DSS, GDPR, HIPAA.

- Conduct risk assessments and lead enterprise-wide risk management programs.

- Oversee internal and third-party audits; drive risk lifecycle and compliance initiatives.

- Manage BC/DR strategies and lead cross-functional compliance training and awareness efforts.

- Liaise with external auditors, clients, and regulatory bodies to ensure seamless audit readiness.

Requirements

- Minimum 7+ years of experience in IT and 5+ years in GRC, including leadership roles.

- Hands-on experience with ISO 27001:2013, GDPR, SOC 2, PCI DSS.

- Preferred certifications: CISA, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, DPO.

- Proficiency in GRC tools and platforms; strong knowledge of data protection laws.

- Excellent leadership, communication, and stakeholder management skills.

What is in it for you

- Opportunity to lead enterprise GRC strategy for a global technology leader

- High visibility role with exposure to clients, auditors, and senior leadership

- Dynamic work culture with emphasis on digital innovation and compliance excellence