SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Diligent is seeking a Security GRC Analyst II to join its Trust & Assurance team in Bengaluru. In this role, you will own a high-volume queue of security questionnaires, third-party due diligence assessments, RFP security sections, and customer assurance requests. You'll use AI-assisted response tooling to draft answers quickly, then verify each response against the company's approved answer library, current SOC 2 and ISO 27001 certifications, and underlying evidence before delivery.
Key responsibilities include: managing incoming security questionnaires and assurance requests within SLA; triaging and routing requests using established playbooks; maintaining and expanding the answer library by adding approved responses and retiring outdated ones; building customer-facing trust site content; and packaging evidence for customer security audits. You'll track quality and throughput metrics including turnaround time, first-pass accuracy, rework rates, and deflection to identify process improvements.
The role requires 2–4 years of experience in security GRC, compliance, IT audit, customer assurance, or a closely related function. You must have working knowledge of SOC 2 and ISO 27001, demonstrable precision under volume in SLA-driven or queue-based work, and strong written English. Essential skills include solid organizational habits for managing competing requests, comfort with AI-assisted tooling paired with healthy skepticism, and the discipline to escalate rather than guess when uncertain.
Desirable but not required: experience with trust centre platforms (SafeBase, Whistic, Conveyor, Vanta), familiarity with questionnaire frameworks (SIG, CAIQ, HECVAT, VSAQ), basic knowledge of AWS/Azure/GCP security concepts, exposure to NIST CSF, GDPR, HIPAA or DORA, early-career security certifications, and experience with Jira, Confluence, Salesforce, or Microsoft 365.
