Cybersecurity & GRC Lead
First seen by Alion on Oct 16, 2026.
ABOUT TRACXN :
Tracxn is a leading global market intelligence platform tracking 7.9M + private companies across 3,000+ sectors and 50+ geographies. We turn deep data into decision-ready insights, powering deal sourcing, market mapping, and due diligence for 850+ clients worldwide, including VC firms, Private Equity, Investment Banks, and Corporates.
ABOUT THE ROLE :
We are seeking a high-energy, technically grounded individual to own and drive our information security compliance program. In this role, you will bridge the gap between Engineering, Product, and external auditors to streamline evidence collection, drive automation, and design low-friction compliance workflows.
KEY RESPONSIBILITIES :
Technical Controls & Evidence Automation :
- Partner directly with Tech and Product Leads to evaluate, design, and verify technical controls across cloud environments, CI/CD pipelines, and IAM identity frameworks.
- Own and administer our GRC automation platform, ensuring continuous evidence collection is functioning and troubleshooting broken automated controls.
Compliance Execution & Audit Support :
- Manage daily workflows for ISO 27001 and SOC 2 Type II audits.
- Track remediation tasks across Engineering, Product, and Operations teams to ensure timely audit readiness.
- Act as the primary coordinator during external audits - gathering documentation, organizing walkthroughs, and managing the evidence queue.
Policy, Risk & Internal Audits :
- Assist in drafting, updating, and distributing information security policies and procedures aligned with Trust Services Criteria and ISO control objectives.
- Conduct regular internal control testing and perform vendor risk assessments.
- Maintain the company's central risk register.
WHAT WE'RE LOOKING FOR :
- 5 - 8 years of total experience, with 2+ years in an Information Security, IT Audit, or Security GRC role.
- Hands-on experience working with modern GRC automation platforms is a must have.
- Basic understanding of cloud infrastructure, access controls (IAM), database encryption standards (KMS), and SSO/MFA implementations.
- A "relentless follow-up" mindset - highly organized, persuasive, and structured in unblocking dependencies with busy engineering teams.
- Strong problem-solving skills - you don't just report a compliance gap; you actively suggest operational workarounds to fix it.
- Preferred : experience driving end-to-end SOC 2 Type II or ISO 27001 audits in a SaaS environment.
WHAT YOU CAN EXPECT AT TRACXN :
- Fixed work timings - 9 hrs x 5 days. Respect for personal time; no taking work home.
- A transparent, meritocratic culture where everyone explains the "why" behind their decisions.
- A candid and collaborative environment that values learning, curiosity, and open discussions.
- Opportunities to lead initiatives, mentor teams, and influence business decisions.
- Work closely with CXOs on high-impact projects driving Tracxn's growth.
Skills
Cyber Security, GRC, GRC Tools, IT Audit, IT Automation, ISO, iAM, Identity Management