GRC Analyst

<div class="content-intro"><p>From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven.</p></div><p><span style="font-size: 10pt;"><strong>About the Role</strong></span></p> <p><span style="font-size: 10pt;">At Fivetran, we're on a mission to make access to data as simple and reliable as electricity. Our fully automated platform moves data from 700+ sources to any destination reliably and securely — powering the analytics, AI, and decision-making that drives modern businesses forward.</span></p> <p><span style="font-size: 10pt;">This role will be part of the GRC team. The Fivetran GRC team is responsible for ensuring the continuous integrity, confidentiality, and availability of customer data. Our customers trust us with their most sensitive information, and maintaining that trust is a critical, core component of both our product and our business.</span></p> <p><span style="font-size: 10pt;">We are seeking a motivated and detail-oriented GRC Analyst to join our Security team. This role is ideal for a control-focused audit professional with a solid understanding of IT systems and infrastructure. Strong communication skills are essential, as is the ability to collaborate and influence across functions and levels of the organization. The position reports to the Director of GRC and will provide broad cross-functional exposure, working closely with teams across Security, Engineering, Operations, IT, and HR.</span></p> <p><span style="font-size: 10pt;">This is a full-time position based in our Bangalore office. We offer a hybrid work model that blends remote flexibility with in-person collaboration, with two days per week in office.</span></p> <p><span style="font-size: 10pt;"><strong>Technologies You’ll Use</strong></span></p> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">GRC platform for organizing, tracking, and managing controls, testing activities, and audit evidence</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Cloud platforms, including AWS, Azure, and GCP, for understanding and evaluating cloud-hosted environments and associated controls</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Jira for ticket management, workflow tracking, and cross-functional collaboration</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">GitHub for version control and collaboration on security documentation and policy management</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Google Workspace for day-to-day productivity, documentation, and internal communication</span></li> </ul> <p><span style="font-size: 10pt;"><strong>What You’ll Do</strong></span></p> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Conduct control walkthroughs, testing, and evaluation of IT general controls and application controls across a complex systems landscape, with coverage spanning ISO 27001, PCI-DSS, SOC 1, SOC 2, and other applicable frameworks</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Partner with cross-functional teams to design, implement, and continuously improve control processes and related documentation</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Support third-party vendor assessments, evaluating vendors against established security and privacy standards and requirements</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Develop, maintain, and update Information Security Policies and Standards in alignment with industry best practices and regulatory obligations</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Participate in IT SOX scoping, risk assessment, and control design activities, contributing to the organization's overall internal control environment</span></li> <li style="font-size: 10pt;"><span style="font-s