GRC Analyst

About Unacademy:

Unacademy is India’s leading learning platform, empowering millions through technology-driven education. We are looking for a GRC Auditor to strengthen our security posture by ensuring compliance with industry standards and best practices.

Key Responsibilities:

• Conduct internal GRC audits to assess compliance with ISO 27001, SOC 2, GDPR, and other regulatory frameworks.
• Identify security risks, gaps, and areas for improvement, and collaborate with teams for mitigation.
• Develop, implement, and enforce security policies, SOPs, and risk management frameworks.
• Ensure secure handling of sensitive data and evaluate third-party risk assessments.
• Work with engineering and IT teams to improve access controls, incident response, and security awareness.
• Maintain and track compliance documentation, audit findings, and remediation plans.

Requirements:

• 3-6 years of experience in GRC, security compliance, or IT audits.
• Strong knowledge of ISO 27001, SOC 2, GDPR, NIST, and risk management principles.
• Experience with VAPT reports, risk assessments, and security governance frameworks.
• Basic understanding of network security, identity & access management (IAM), and cloud security.
• Strong analytical skills and ability to communicate security risks effectively.
• Certifications like CISA, CRISC, or ISO 27001 Lead Auditor are a plus.

Why Join Us?

• Work on large-scale security & compliance challenges in a fast-paced edtech environment.
• Collaborate with cross-functional teams to shape security strategies.
• Competitive salary, benefits, and opportunities for professional growth.