GRC Specialist
MoEngage · Posted Oct 5, 2026
- Bengaluru, Karnataka, India
- 4–5 years
GRC Specialist to execute day‑to‑day compliance and risk program tasks, including responding to customer security questionnaires, supporting audits, and assessing vendor risk.
Responsibilities
- Own end‑to‑end responses to inbound customer RFPs, RFIs, and CAIQs
- Conduct risk assessments and control validation testing against frameworks such as SOC 2, ISO 27001, and NIST
- Support the full lifecycle of SOC 2 and ISO 27001 audits
- Conduct vendor security assessments and review vendor questionnaire responses
- Keep customer‑facing certifications, policies, and security documentation current
Requirements
- Nice to have: ISO 27001 Lead Implementer/Auditor certification
- Nice to have: experience responding to customer security questionnaires in a SaaS environment
- Nice to have: familiarity with IT/cloud infrastructure