Cybersecurity GRC Analyst

Copeland

Cybersecurity GRC Analyst managing policies and compliance in a climate technology company. Developing cybersecurity standards and conducting risk assessments for organizational security.

Posted 5/6/2026full-timePune • 🇮🇳 IndiaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Develop, implement, and maintain cybersecurity policies, standards, and procedures in alignment with industry frameworks and regulatory requirements.
Conduct risk assessments, security control evaluations, and gap analyses to identify and mitigate risks.
Support internal and external audits, ensuring compliance with frameworks such as NIST CSF, ISO 27001, CIS Controls, SOC 2, and regulatory obligations.
Assist in the management of third-party risk assessments and vendor security evaluations.
Track, monitor, and report on cybersecurity risks, controls, and compliance metrics.
Work with cross-functional teams to ensure security controls are embedded in business processes and IT operations.
Develop and maintain risk registers, compliance documentation, and audit evidence repositories.
Provide cybersecurity awareness training and guidance to employees on security best practices and compliance requirements.
DLP Strategy & Oversight: Manage and help fine tune DLP Policies (preferable Zscaler) for Endpoint, Network and cloud) to protect sensitive data (PII, PCI, IP).
Stay current with evolving cybersecurity threats, regulatory changes, and best practices to enhance the organization's security and compliance posture.

Requirements

What you’ll need

Bachelor’s degree in computer science, Information Systems, or related degree plus three (3+) years of experience or equivalent combination of education and experience.
Strong knowledge of security and risk management frameworks like NIST CSF, CIS Critical Security Controls, ISO 27001, NIST 800-53, FAIR, and CIS.
Must possess excellent oral and written communication skills and the ability to communicate in technical and business terms.
Additionally, must be comfortable developing presentations and delivering them to senior management.
3+ years of experience in cybersecurity, governance, risk, and compliance.
Experience conducting risk assessments, control evaluations, and compliance audits.
Strong knowledge of cybersecurity best practices, policies, and procedures.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and collaboratively in a dynamic environment.
Professional certifications in IT and Cybersecurity a plus (e.g., Security+, GCRP, CGRC etc.).

Benefits

Comp & perks

Flexible and competitive benefits plans offer the right options to meet your individual/family needs.
We provide employees with flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity policiesrisk assessmentssecurity control evaluationsgap analysescompliance auditsDLP policiesNIST CSFISO 27001CIS ControlsSOC 2

Soft Skills

oral communicationwritten communicationpresentation skillsanalytical skillsproblem-solvingcollaborationindependencedynamic environment adaptability

Certifications

Security+GCRPCGRC