Security GRC Analyst II

About this job

As a Security GRC Analyst II at Diligent Corporation in Bengaluru, you will join the Trust & Assurance team to handle customer security reviews and compliance inquiries. Diligent is an AI leader in governance, risk, and compliance SaaS solutions, helping enterprises clarify risk and elevate governance through the Diligent One Platform. In this role, your daily routine involves managing a live queue of security questionnaires, third-party due diligence assessments, and RFP security sections. You will use AI-assisted response tooling to draft answers quickly and verify every piece of information against approved answer libraries, current SOC 2 and ISO 27001 certifications, and underlying evidence. Additionally, you will triage incoming requests, expand the answer library, build trust site content to promote self-service, and track throughput metrics to reduce friction and improve turnaround times.

Responsibilities

• Manage a high-volume queue of security questionnaires, due diligence assessments, and assurance requests.
• Draft responses using AI tools and verify them against approved answer libraries and current certifications.
• Triage and route incoming requests, resolving routine tasks independently and escalating complex ones.
• Maintain and expand the answer library by adding approved answers and retiring stale content.
• Build trust site and customer-facing content to turn recurring questions into self-serve answers.
• Package evidence for customer security audits and track quality and throughput metrics.

Requirements

• 2 to 4 years of experience in security GRC, compliance, IT audit, or customer assurance.
• Working knowledge of SOC 2 and ISO 27001 control requirements.
• Demonstrable precision under volume in SLA-driven or queue-based work.
• Strong written English with the ability to answer security questions concisely.
• Solid organizational habits to manage a queue of competing requests.
• Comfort working with AI-assisted tooling while maintaining a critical verification mindset.
• Discipline to escalate rather than guess when faced with unknown queries.

Good to have

• Experience with trust centre or trust portal platforms like SafeBase, Whistic, Conveyor, or Vanta.
• Familiarity with questionnaire frameworks such as SIG, CAIQ, HECVAT, or VSAQ.
• Basic working knowledge of AWS, Azure, or GCP security concepts.
• Exposure to frameworks like NIST CSF, GDPR, HIPAA, or DORA.
• Early-career certifications such as ISO 27001 Foundation, CompTIA Security+, or CISA.

Who should apply

This role suits professionals with two to four years of experience in security GRC, IT audit, or compliance who thrive in fast-paced, high-volume queue environments. Ideal candidates possess strong written communication skills, meticulous attention to detail, and familiarity with security frameworks like SOC 2 and ISO 27001. If you are comfortable leveraging AI tools for drafting while maintaining strict accuracy standards and enjoy turning recurring tasks into scalable self-service solutions, you will succeed here. Please note that freshers are not mentioned for this position as 2-4 years of experience is required.

Frequently asked questions