{"id":3097136,"url":"https://alion.io/job/unisys-grc-security-analyst","title":"GRC Security Analyst","company":{"id":6839,"name":"Unisys","domain":"unisys.com","url":"https://alion.io/company/unisys","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":73,"ghost_share":0,"stale_share":0.849,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":10500,"max_usd":30000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Office","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-22T16:26:47Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-24T04:29:07Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"What success looks like in this role:\nKey Responsibilities\nGovernance\nAssist in the development, review, and maintenance of information security policies, standards, procedures, and guidelines in line with frameworks such as ISO 27001 and NIST CSF.\nSupport periodic policy review cycles, ensuring documentation is kept current, version-controlled, and accessible to relevant stakeholders.\nContribute to security awareness initiatives by preparing training materials, tracking completion rates, and maintaining associated records.\nMaintain governance trackers and document repositories, ensuring accuracy and completeness at all times.\nSupport the preparation of governance reports, dashboards, and meeting packs for internal and client stakeholders.\nRisk Management\nSupport the conduct of information security risk assessments under the guidance of senior team members, contributing to the identification and evaluation of threats, vulnerabilities, and business impacts.\nMaintain and update the risk register, ensuring risks are accurately documented, assigned, and tracked through treatment to closure.\nAssist with third-party and vendor risk assessments by gathering required information, reviewing responses, and documenting findings.\nSupport business continuity and disaster recovery documentation, review cycles, and testing activities.\nHelp prepare risk reports and escalate identified risks to senior analysts or management as appropriate.\nCompliance\nSupport compliance activities against applicable frameworks and standards including ISO 27001, NIST CSF, CIS Controls, PCI-DSS, GDPR, and client-specific requirements.\nAssist in the planning and coordination of internal and external audits - gathering evidence, preparing documentation packages, and tracking audit findings through to remediation.\nConduct periodic compliance checks and control walkthroughs to verify that controls are in place and operating as expected.\nMaintain compliance calendars and support the team in meeting regulatory deadlines, audit schedules, and periodic review obligations.\nTrack and follow up on corrective action plans arising from audit findings, ensuring timely closure and accurate record-keeping.\nSecurity Control Assessment\nAssist in conducting periodic assessments of security controls across people, process, and technology dimensions.\nDocument control observations, gaps, and weaknesses identified during assessments and support the preparation of remediation recommendations.\nCoordinate with technical and operational teams to gather evidence of control effectiveness and maintain supporting records for audit readiness.\nReporting & Metrics\nMaintain and update GRC dashboards, trackers, and metrics on a regular basis, ensuring data accuracy and completeness.\nPrepare routine GRC reports, meeting packs, and status updates for review by senior analysts or management before distribution to clients.\nTrack and report on KPIs including policy compliance rates, open risk items, audit finding closure timelines, and training completion rates.\nClient & Stakeholder Engagement\nSupport client-facing GRC activities including governance meetings, monthly business reviews, and audit sessions under the guidance of senior team members.\nRespond to client queries on policy, compliance, and risk matters accurately and in a timely manner, escalating complex queries where appropriate.\nMaintain a professional and collaborative relationship with client security and compliance contacts.\nProcess Improvement\nIdentify and flag opportunities to improve GRC processes, templates, and documentation practices.\nStay current with developments in security frameworks, regulatory requirements, and industry best practices, and share relevant updates with the team.\nSupport the adoption of GRC tools and contribute to improving data quality and workflow efficiency within those platforms.\nYou will be successful in this role if you have:\n2-4 years of experience in information security with exposure to governance, risk, and/or compliance functions.\nWorking knowledge of at least one or two information security frameworks such as ISO 27001, NIST CSF, CIS Controls, or PCI-DSS.\nBasic understanding of risk assessment methodologies and the ability to identify and document security risks with guidance.\nFamiliarity with audit processes - evidence gathering, control walkthroughs, and finding documentation.\nAbility to contribute to the development and review of security policies and procedures.\nGood analytical skills with attention to detail and a structured approach to documentation and tracking.\nProficient in Microsoft Office tools (Word, Excel, PowerPoint) for report preparation, tracker maintenance, and presentation development.\nGood written and verbal communication skills with the ability to convey security and compliance information clearly.\nExposure to GRC platforms or ticketing tools such as ServiceNow, RSA Archer, or equivalent is an advantage.\nExperience in a managed security services or client-facing environment is a plus. Preferred Certifications\nCompTIA Security+\nISO 27001 Foundation or Internal Auditor\nCertified in Risk and Information Systems Control (CRISC) - Associate level\nCISM or CISSP - Foundation / Associate level\nAny vendor-specific GRC tool certification is a plus\nUnisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.\nLocal employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.\nIf you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at . US job seekers can find more information about Unisys’ EEO commitment here.","description_format":"text","description_chars":6385,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Infrastructure & Networking Services","IT Help Desk & Service Desk","IT Consulting & Digital Transformation","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-22T16:26:47Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":0.9,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":30,"reasons":["conf:49","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/unisys-grc-security-analyst","json_url":"https://alion.io/job/unisys-grc-security-analyst.json","meta":{"generated_at":"2026-10-26T13:51:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19141,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6839},"rest":"https://alion.io/mcp/rest/get_company?id=6839"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Funisys-grc-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Funisys-grc-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Funisys-grc-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/unisys-grc-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Funisys-grc-security-analyst"}]}