Skip to content

GRC

GRC Analyst

Abacus logoAbacusChennai, Tamil Nadu, IndiaPosted 1w ago
Apply on Abacus (shows the role here)Abacus as an employer: salaries and roles

The full posting

Seeking someone passionate about information security and customer service to assist customers in meeting their cybersecurity regulatory and legal requirements. Analysts will work with customers to develop formalized information security policies, analyze the efficacy of current policies and procedures, evaluate the risks posed by third-party providers, provide security awareness training to clients, and provide insight into cybersecurity regulations.

Responsibilities (including, but not limited to)

  • Performing and assisting with cybersecurity due diligence assessments on behalf of clients
  • Performing and assisting with cybersecurity due diligence assessments on internal vendors
  • Assisting with coordinating and collecting evidence for internal compliance initiatives (e.g., SOC 2 audits)
  • Providing insight into updating internal information security documents and policies
  • Assisting with executing security awareness training via KnowBe4
  • Coordinating and working with clients to develop formalized Written Information Security Programs (WISPs) and AI governance programs
  • Coordinating with other analysts and engineers as part of vCISO advisory services
  • Researching and keeping up to date with financial services, US healthcare, and data privacy requirements including DORA, FCA, CCPA, GDPR, HIPAA, FINRA, DFSA, ADGM, CSSF, and NYDFS.

Qualifications

  • Intermediate operational capabilities for the Office 365 stack (Microsoft Word, Excel, Outlook)
  • Strong ability to direct self-work with excellent organizational and time management skills.
  • Excellent verbal and written communication skills, especially when communicating technical concepts to non-technical audiences.
  • Critical and creative thinking to strategize how to add value to customer engagements and improve processes
  • Effective SOP writing.
  • Ability to remain flexible as processes continuously improve.
  • Required certifications: One of either CompTIA Security+, ISC2 CC, or CGRC
  • Preferred certifications: OCEG GRCP, CGRC, CRISC, CISSP, SecAI+, AIGP or other AI governance certifications
  • Knowledge of Secure Software Development Life Cycle (SSDLC) practices is a plus.
  • Experience with GRC platform implementation and operation is a plus.

Text as Abacus published it; last compared with the original on 13 Nov 2026.

Apply on Abacus (shows the role here)

The application

Your details and CV, then 3 questions.

Keep these to handCV
  1. 1.
    Do you have experience with any of the following regulatory frameworks: SEC, FCA, FTC, FINRA, and NYDFS?Choose any: SEC · FCA · FTC · FINRA · NYDFS · None of the above
  2. 2.
    What is your desired salary?Short answer
  3. 3.
    what is your Notice periodShort answer

Taken from Abacus's application form as it stood on 13 Nov 2026.

The employer: Abacus

Runs IT and security for financial and healthcare firms, with six openings in incident response, GRC and engineering across the US, UK and Chennai.

Pay and benefits: Full-time staff roles serving many client environments, remote in the US and UK.

Full postings from Abacus All Abacus openings on the board Abacus employer profile

Other security roles worth a look

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Abacus posts a security role

We read Abacus's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.