Lead GRC Analyst

Position Title:

Lead GRC Analyst

Department:
Information Security

Location:

VDart GCC - Trichy

Shift :
Night Shift

Employment Type:

Full-Time

Experience : 4 to 7 years

The Security & GRC Lead is a business-critical leadership role at VDart Group, responsible for overseeing information security governance, risk management, and regulatory compliance across global operations. The role ensures continuous compliance with ISO 27001, SOC 2 Type 2 and client- specific security requirements, enabling VDart to maintain certifications, win

new business, and retain global clients.

This role works closely with Global IT, Legal, HR, Sales, Delivery, and external auditors to embed a strong security and compliance culture across the organization.

Key Result Area

- 1. Compliance & Certification Management –Own and manage VDart’s ISO 27001 ISMS, including surveillance and re-certification audits & Lead SOC 2 Type 2 compliance programs across VDart Group entities
- 2. Audit Evidence & Documentation Management
- 3. Vendor Risk Management (TPRM)
- 4. Client Security Questionnaires & Due Diligence
- 5. Policy, SOP & Awareness Program
- 6. Data Classification & Retention Governance

Key Deliverables

- 1. Successful ISO 27001 and SOC 2 audit outcomes VDart Group Entities.
- 2. Zero major audit non-conformities
- 3. Timely completion of client security assessments
- 4. Effective vendor risk management controls
- 5. Up-to-date policies, SOPs, and training records
- 6. Strong audit evidence and compliance documentation

Education

- Bachelor’s degree in IT, Computer Science, Information Security
- Experience
- 4–7+ years of experience in Information Security, GRC, Audit roles
- Hands-on experience with ISO 27001, SOC 2
- Strong exposure to client audits, vendor risk assessments, and
- compliance reviews
- Experience working with global clients and cross-functional teams

Certifications Preferred

- ISO 27001 Lead Auditor / Lead Implementer

Key Skills & Competencies

- Information Security Governance & Risk Management
- Audit & Compliance Management
- Vendor Risk & Third-Party Assessments
- Client Security Assurance & Questionnaire Handling
- Policy & SOP Development
- Strong documentation and presentation skills
- Stakeholder management and leadership skills
- High attention to detail and risk-based thinking