About the role

  • GRC Analyst supporting enterprise risk management and compliance at Coupa. Analyzing risk data and maintaining vendor assessments in a collaborative environment.

Responsibilities

  • Collect, analyze, and interpret risk data from multiple sources (security operations, product, compliance, audits).
  • Conduct onboarding and periodic risk assessments for suppliers, SaaS vendors, and key third-party partners.
  • Send and track vendor due-diligence questionnaires, review responses, SOC reports, and certifications to identify gaps.
  • Maintain and update quarterly Risk Dashboards, KRI/KPI Reports, and decision-support visuals.
  • Monitor remediation progress across risk owners and functional teams.
  • Maintain the single source of truth for control and requirement mappings, ensuring alignment with regulatory and industry frameworks (ISO 27001/27701, SOC 2, NIST CSF, PCI DSS, etc.).
  • Prepare baseline compliance reports and dashboards for management review.
  • Aggregate data from GRC tools, Jira, spreadsheets, and other systems to build metric packs.

Requirements

  • 1–3 years of experience in risk management, GRC operations, security compliance, vendor management, or audit.
  • Basic understanding of security and compliance frameworks (NIST CSF, ISO 27001/27701, SOC 2, PCI DSS, or similar).
  • Strong organizational, analytical, and documentation skills; comfortable working with metrics, spreadsheets, and structured data.
  • Ability to review and map detailed compliance requirements logically to controls.
  • Ability to interpret vendor documentation and identify red flags or gaps.
  • Excellent communication and follow-up skills for coordinating cross-functional reviews.

Benefits

  • Pioneering Technology: At Coupa, we're at the forefront of innovation, leveraging the latest technology to empower our customers with greater efficiency and visibility in their spend.
  • Collaborative Culture: We value collaboration and teamwork, and our culture is driven by transparency, openness, and a shared commitment to excellence.
  • Global Impact: Join a company where your work has a global, measurable impact on our clients, the business, and each other.

Job title

GRC Analyst

Job type

Experience level

Junior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

HybridPuneIndia

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job