Security GRC Analyst at Rockstar Games in Bengaluru, Karnataka, India

Job description

• Rockstar is on the lookout for a talented Security Analyst within Security GRC to support Security Compliance Operations through recurring control validation, evidence review, reporting preparation, and remediation tracking. This role will help determine whether key security safeguards are operating as intended by performing manual and semi-automated validation activities, analyzing evidence from multiple sources, documenting control gaps, and preparing clear reporting that helps interpret validation results.
• This is a full-time permanent position based out of Rockstar’s studio in Bangalore, India.

Responsibilities

• Perform recurring manual and semi-automated validation of security controls to confirm safeguards are operating as intended.
• Collect, review, and organize evidence from systems, tools, reports, and stakeholders to support control validation, audit readiness, and compliance reporting.
• Analyze validation results to identify control gaps, exceptions, inconsistencies, and trends that may require remediation or further review.
• Support the maintenance of control validation procedures, evidence standards, reporting templates, and control health metrics.
• Track remediation actions, follow up on open items, and help ensure control gaps are documented, prioritized, and progressed to closure.
• Partner with technology and security stakeholders to clarify evidence needs, validate findings, and support practical remediation of control gaps.
• Work with colleagues to help identify repeatable validation activities that can be improved through automation or enhanced reporting.
• Support audits, assessments, and compliance reviews by preparing evidence, validating control operation, and responding to information requests.
• Provide support for broader Security Risk Management activities, including risk documentation, issue tracking, metrics preparation, and continuous improvement of GRC processes.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• 3+ years of experience in security compliance, GRC, technology risk, security operations, or a related cybersecurity role.
• Strong written and verbal communication skills to deliver concise compliance reporting and trend analysis, with a proven ability to translate complex technical evidence and validation results into actionable insights for diverse stakeholders.
• Familiarity with security control domains such as identity and access management, vulnerability management, patch management, endpoint security, cloud configuration, logging and monitoring, and third-party access.
• Ability to review evidence, compare data, identify exceptions, and determine whether controls are operating as intended.
• Ability to develop clear, concise reporting that communicates validation results, control gaps, remediation status, trends, and compliance posture.
• Familiarity with the CIS Critical Security Controls and related frameworks, with awareness of how controls are validated and reported.
• Strong attention to detail, organizational skills, and follow-through when managing recurring validation activities, evidence requests, and reporting cycles.
• Please note that these are desirable skills and are not required to apply for the position.
• Relevant certifications in cybersecurity, audit, risk, or compliance domains, such as Security+, CISA, CISSP, CRISC, or similar certifications.

Skills

Required

• Strong attention to detail
• Organizational skills
• Follow-through
• Security compliance
• GRC
• Technology risk
• Security operations
• Control validation
• Evidence review
• CIS Critical Security Controls