Senior GRC Analyst

Posted 9 Days Ago
Be an Early Applicant
Mumbai, Maharashtra, IND
In-Office
Senior level
Cloud
The Role
Manage compliance across SOC 2, ISO, CSA STAR, privacy, and AI governance frameworks. Support audits, validate controls, maintain privacy operations, respond to client security questionnaires, and assess third-party vendor risks. The role requires strong GRC and information security experience in SaaS or technology environments, cloud security familiarity, and knowledge of GDPR, CCPA, HIPAA, and emerging AI governance requirements.
Summary Generated by Built In

About the Role :

As a Senior GRC Analyst, you will play a key role in managing and strengthening our compliance framework across multiple standards, including ISO 27001, ISO 42001, ISO 27701, ISO 27017, SOC 2 Type II, CSA STAR, and privacy regulations such as GDPR and HIPAA.

This role offers an exciting opportunity to go beyond traditional audits and gain hands-on exposure to AI Governance, emerging technology regulations, and evolving compliance requirements.

What will you do :

  • Multi-Framework Audit Support: Support the end-to-end audit cycles for SOC 2 Type II (Trust Services Criteria), ISO 27001, ISO 27017, ISO 42001, ISO 27701  and CSA STAR Level 2. You will gather evidence, validate controls, and work with auditors to ensure zero non-conformities.

  • Global Privacy Operations: Ensure operational compliance with GDPR, CCPA, and HIPAA. This includes maintaining Records of Processing Activities (ROPA), handling Data Subject Rights (DSR) requests, and reviewing BAAs (Business Associate Agreements).

  • AI Governance & Research: Collaborate with multiple teams to research and implement security controls for Artificial Intelligence. You will help draft policies for the responsible use of GenAI tools within the company.

  • Client Trust & Assurance: Act as the first line of response for client security questionnaires. You will articulate our stance on SOC 2 controls, HIPAA compliance, and AI security to global enterprise clients.

  • Vendor Risk Management (VRM): Execute security assessments for third-party vendors. You must be able to read a vendor's SOC 2 report or HIPAA attestation and identify risks to CleverTap.

What are we looking for ?

  • 5 to 7 years of hands-on experience in GRC, Audit, or Information Security within a SaaS or Technology environment.

  • Audit Expertise: Experience participating in SOC 2 Type II, ISO 27017, ISO 42001, ISO 27701 and ISO 27001 audits is mandatory. 

  • Privacy Knowledge: Solid understanding of GDPR, CCPA, and HIPAA. 

  • Cloud Security: Familiarity with the CSA STAR (Cloud Security Alliance) framework and basic AWS security concepts.

  • AI Enthusiast: You do not need to be an AI expert, but you must have a keen interest in learning AI governance. You should be excited to learn about OWASP Top 10 for LLMs.

Good to Have :

  • Bachelor’s degree in Computer Science, Information Security, or a related field.

  • Certifications such as ISO 27001 LA/LI, CIPP/E, or CCSK (Certificate of Cloud Security Knowledge).

Who will you report to: Associate Director - Information Security

Why join us:

  • Contribute to a product backed by 11 technology patents, showcasing industry-leading innovation.
    You are passionate about technology and its impact on the high-growth mobile technology space

  • Power personalized engagement at scale, processing over 30 billion events daily and reaching 3+ billion devices worldwide.

  • Flourish in an Environment that Nurtures Growth and Curiosity

Learn More

Get to know us better before you apply!

Check out our product documentation, engineering blog, and customer stories to see how we work and what we value.

  • Our Culture Video

  • CleverAI 

  • CleverTap Developer Documentation

  • Blogs

  • TesseractDB™

  • CleverTap Product Demo

About CleverTap:

CleverTap is the world’s leading AI-first, all-in-one customer engagement and retention platform, redefining how brands build lasting customer relationships in the Agentic era. Powered by its proprietary CleverAI™ Decisioning Engine and the Agentic Universe, CleverTap enables autonomous, real-time decision-making that helps organizations deliver 1:1 individualized experiences at scale while maximizing ROI.

Its unified platform brings together an AI-native Personalization Engine, automated Journey Orchestration, its proprietary Customer Data Platform – TesseractDB™, and deep customer and product analytics to power truly intelligent, self-optimizing engagement across channels including mobile, web, email, SMS, WhatsApp, and more. By seamlessly connecting data, insights, and activation, CleverTap ensures every interaction is contextual, coordinated, and conversion-driven.

Recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Personalization Engines and a Strong Performer in The Forrester Wave™, CleverTap is at the forefront of the shift from campaign-led marketing to agent-led growth. Trusted by more than 2,000 global brands including IKEA, Tesco, Burger King, Levi’s, Decathlon, Domino’s, 7-Eleven, Jio, Grab, Carousell, and Emirates NBD, CleverTap helps businesses drive measurable growth through meaningful, autonomous customer engagement.

Backed by Accel, Peak XV Partners, Tiger Global, CDPQ, and 360 One, CleverTap has 550+ employees across offices in the US, the Middle East, Asia, and LATAM.

For more information, visit https://clevertap.com/ or follow us on Linkedin and X.

Join us in shaping the future of engagement.

CleverTap is dedicated to establishing an inclusive culture that welcomes individuals from diverse backgrounds, encouraging them to contribute their unique perspectives to our workplace.

Skills Required

  • 5 to 7 years of hands-on experience in GRC, audit, or information security within a SaaS or technology environment
  • Experience participating in SOC 2 Type II audits
  • Experience participating in ISO 27001 audits
  • Experience participating in ISO 27017 audits
  • Experience participating in ISO 42001 audits
  • Experience participating in ISO 27701 audits
  • Solid understanding of GDPR, CCPA, and HIPAA
  • Familiarity with the CSA STAR framework
  • Basic AWS security knowledge
  • Interest in AI governance and learning the OWASP Top 10 for LLMs
  • Bachelor’s degree in Computer Science, Information Security, or a related field
  • ISO 27001 Lead Auditor or Lead Implementer certification
  • CIPP/E certification
  • CCSK certification
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: San Francisco, CA
471 Employees
Year Founded: 2013

What We Do

CleverTap is the modern, integrated retention cloud that empowers digital consumer brands to increase customer retention and lifetime value. CleverTap drives contextual individualization with the help of a unified and deep data layer, AI/ML-powered insights, and automation enabling brands to offer hyper-personalized and delightful experiences to their customers. 1,200+ customers in 60+ countries and 10,000+ apps, including Gojek, ShopX, Canon, Mercedes Benz, Electronic Arts, TED, Jio, Premier League, TD Bank, Carousell, Papa John’s, and Tesco, trust CleverTap to achieve their retention and engagement goals, growing their long-term revenue. Backed by leading venture capital firms, including Sequoia, Tiger Global Management, and Accel, the company is headquartered in Mountain View, California, with offices in Mumbai, Singapore, Sofia, São Paulo, Bogota, Amsterdam, Jakarta, and Dubai. For more information, visit clevertap.com

Similar Jobs

Mastercard Logo Mastercard

Senior Data Scientist

Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Hybrid
Pune, Maharashtra, IND
38800 Employees

Mastercard Logo Mastercard

Manager, Software Engineering - Java, Springboot, Kafka, SQL

Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Hybrid
Pune, Maharashtra, IND
38800 Employees

Mastercard Logo Mastercard

Software Engineer

Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Hybrid
Pune, Maharashtra, IND
38800 Employees

Mastercard Logo Mastercard

Data Scientist

Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Hybrid
Pune, Maharashtra, IND
38800 Employees

Similar Companies Hiring

Rundoo Thumbnail
Cloud • Information Technology • Internet of Things • Software
Redwood City, California
70 Employees
NetBox Labs Thumbnail
Cloud • Software
US
150 Employees
Toro TMS Thumbnail
Cloud • Enterprise Web • Sales • Software • Transportation
Chicago, IL
80 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account