Senior GRC Analyst

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

• Perform security control assessments against organizational policies, security standards, and regulatory requirements.
• Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
• Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
• Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
• Conduct control testing and risk assessments and support internal/external security audits.
• Review security policies, procedures, standards, and governance frameworks for compliance.
• Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
• Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

• Cyber Security Risk & Compliance / GRC
• IT Risk & Controls
• Security Control Assessment & Testing
• Security Audits
• Backup & Disaster Recovery
• BCP / DR
• Risk Assessment
• Compliance & Governance
• Security Policies & Standards
• Audit Finding & Remediation Management

We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the

design, implementation, and maintenance of our ISO 27001 Information Security Management

System (ISMS). This is a hands-on leadership role responsible for establishing a robust security

governance framework, achieving ISO 27001 certification, and embedding a culture of

continuous security improvement across the organization.

Key Responsibilities

● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation

from gap analysis through to successful Stage 1 and Stage 2 certification audits;

manage external auditor relationships

● Risk Management: Develop and operationalize the information security risk

management framework; conduct risk assessments, treatment planning, and risk

acceptance processes.

● Policy & Governance : Author, approve, and maintain the Statement of Applicability

(SoA), information security policies, standards, and procedures aligned with ISO 27001

Annex A controls.

● Control Implementation: Translate ISO 27001 Annex A controls into operational

security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to

implement and validate controls.

● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and

KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective

actions.

● Third-Party Risk: Oversee vendor security assessments and ensure supply chain

security controls meet organizational and ISO 27001 standards.

● Stakeholder Management: Report ISMS performance, risks, and compliance status to

senior leadership and the board; act as primary liaison for external auditors and

regulators.

Required Qualifications

● 5+ years of experience in information security governance, risk, and compliance

● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap

analysis → certification)

● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS

documentation requirements

● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,

OCTAVE, FAIR)

● Familiarity with internal audit practices and managing external certification bodies

● Excellent stakeholder management and ability to influence across technical and non-

technical teams

● Strong documentation and communication skills — able to translate complex standards

into actionable guidance

Preferred Qualifications

● Experience implementing ISMS in fintech, healthcare, or regulated industries

● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks

● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments

● Knowledge of automation for compliance evidence collection and control testing

● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead

Implementer

Why Join Us

● Opportunity to build the security governance function from the ground up

● High-visibility role with direct impact on customer trust and market differentiation

● Collaborative environment that values security as a business enabler, not a blocker

Company Profile:

We are a one-stop financial services shop, widely known for quality of its advice, personalized

service and cutting-edge technology. We started our journey in 2008. Currently we are serving

more than 50,000 investors with a team of 100 members. Our core product offering is mutual

fund, FD, Govt. Bonds, Debenture, etc.

Job Summary

We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.

The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.

Key Responsibilities

• Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
• Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
• Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
• Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
• Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
• Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
• Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
• Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
• Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
• Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.

Required Skills & Experience

• 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
• Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
• Experience with one or more enterprise risk technology platforms, such as:
• RSA Archer
• ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
• Other enterprise GRC and risk management platforms
• Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
• Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
• Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
• Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
• Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
• Strong communication, problem-solving, strategic planning, and decision-making skills.

Preferred Qualifications

• Experience in banking, financial services, insurance, or other regulated industries.
• Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
• Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
• Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.

Key Competencies

• Enterprise GRC Technology Strategy
• Technology Delivery & Programme Leadership
• Risk Platform Implementation and Optimization
• Stakeholder & Vendor Management
• Process Automation and Digital Transformation
• AI/GenAI and Analytics Enablement
• Global Team Leadership
• Governance, Controls and Continuous Improvement

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

Years of Exp: 5 to 8 Years (Relevant 5+ Years)

Location: Hyderabad

Notice Period: Immediate to 20 days

Offshore: Data Governance Analyst

Position Summary

Execute day-to-day Data Governance activities for RTB initiatives under the direction of the Onshore Lead. The role will focus on producing accurate, complete, and traceable governance artifacts that support enterprise standards, control requirements, and audit readiness.

Key Responsibilities

Register and maintain data assets, reports, and data products in Collibra and Data Marketplace.

Capture and validate business, technical, and operational metadata.

Document end-to-end data lineage, including sources, targets, transformations, and data movement.

Support business glossary, data classification, ownership, stewardship, and authoritative source documentation.

Assist with data quality rule documentation, issue tracking, and remediation follow-up.

Coordinate with data owners, engineers, architects, and application teams to resolve documentation gaps.

Maintain governance evidence, decisions, status reports, and action items.

Track work through Jira and escalate blockers promptly to the Onshore Lead.

Support multiple RTB workstreams while meeting established quality and delivery expectations.

Required Qualifications

Experience in Data Governance, Data Management, metadata management, lineage, or data quality.

Working knowledge of Collibra or a comparable governance platform.

Understanding of data warehousing, data modeling, ETL/data pipelines, and system-to-system data flows.

SQL proficiency and familiarity with cloud data platforms, preferably Snowflake.

Strong analytical, documentation, communication, and organizational skills.

Ability to work effectively in an onshore-offshore delivery model.

Preferred Qualifications

Experience with Collibra or similar Data Governance Platforms, Jira, Confluence, Cloud Data Solutions, Excel

Financial-services or regulated-industry experience.

Familiarity with Agile delivery and audit or regulatory documentation.

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less