GRC Analyst

About the Role:

As a Senior GRC Analyst, you will play a key role in managing and strengthening our compliance framework across multiple standards, including ISO 27001, ISO 42001, ISO 27701, ISO 27017, SOC 2 Type II, CSA STAR, and privacy regulations such as GDPR and HIPAA.

This role offers an exciting opportunity to go beyond traditional audits and gain hands-on exposure to AI Governance, emerging technology regulations, and evolving compliance requirements.

What will you do:

• Multi-Framework Audit Support: Support the end-to-end audit cycles for SOC 2 Type II (Trust Services Criteria), ISO 27001, ISO 27017, ISO 42001, ISO 27701 and CSA STAR Level 2. You will gather evidence, validate controls, and work with auditors to ensure zero non-conformities.
• Global Privacy Operations: Ensure operational compliance with GDPR, CCPA, and HIPAA. This includes maintaining Records of Processing Activities (ROPA), handling Data Subject Rights (DSR) requests, and reviewing BAAs (Business Associate Agreements).
• AI Governance & Research: Collaborate with multiple teams to research and implement security controls for Artificial Intelligence. You will help draft policies for the responsible use of GenAI tools within the company.
• Client Trust & Assurance: Act as the first line of response for client security questionnaires. You will articulate our stance on SOC 2 controls, HIPAA compliance, and AI security to global enterprise clients.
• Vendor Risk Management (VRM): Execute security assessments for third-party vendors. You must be able to read a vendor's SOC 2 report or HIPAA attestation and identify risks to CleverTap.

What are we looking for?

• 5 to 7 years of hands-on experience in GRC, Audit, or Information Security within a SaaS or Technology environment.
• Audit Expertise: Experience participating in SOC 2 Type II, ISO 27017, ISO 42001, ISO 27701 and ISO 27001 audits is mandatory.
• Privacy Knowledge: Solid understanding of GDPR, CCPA, and HIPAA.
• Cloud Security: Familiarity with the CSA STAR (Cloud Security Alliance) framework and basic AWS security concepts.
• AI Enthusiast: You do not need to be an AI expert, but you must have a keen interest in learning AI governance. You should be excited to learn about OWASP Top 10 for LLMs.

Good to Have:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Certifications such as ISO 27001 LA/LI, CIPP/E, or CCSK (Certificate of Cloud Security Knowledge).

Who will you report to:

Associate Director - Information Security

Why join us:

• Contribute to a product backed by 11 technology patents, showcasing industry-leading innovation. You are passionate about technology and its impact on the high-growth mobile technology space
• Power personalized engagement at scale, processing over 30 billion events daily and reaching 3+ billion devices worldwide.
• Flourish in an Environment that Nurtures Growth and Curiosity

Learn More

Get to know us better before you apply!

Check out our product documentation, engineering blog, and customer stories to see how we work and what we value.

About CleverTap:

CleverTap is the world's leading AI-first, all-in-one customer engagement and retention platform, redefining how brands build lasting customer relationships in the Agentic era. Powered by its proprietary CleverAI™ Decisioning Engine and the Agentic Universe, CleverTap enables autonomous, real-time decision-making that helps organizations deliver 1:1 individualized experiences at scale while maximizing ROI.

Its unified platform brings together an AI-native Personalization Engine, automated Journey Orchestration, its proprietary Customer Data Platform – TesseractDB™, and deep customer and product analytics to power truly intelligent, self-optimizing engagement across channels including mobile, web, email, SMS, WhatsApp, and more. By seamlessly connecting data, insights, and activation, CleverTap ensures every interaction is contextual, coordinated, and conversion-driven.

Recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Personalization Engines and a Strong Performer in The Forrester Wave™, CleverTap is at the forefront of the shift from campaign-led marketing to agent-led growth. Trusted by more than 2,000 global brands including IKEA, Tesco, Burger King, Levi's, Decathlon, Domino's, 7-Eleven, Jio, Grab, Carousell, and Emirates NBD, CleverTap helps businesses drive measurable growth through meaningful, autonomous customer engagement.

Backed by Accel, Peak XV Partners, Tiger Global, CDPQ, and 360 One, CleverTap has 550+ employees across offices in the US, the Middle East, Asia, and LATAM.

For more information, visit https://clevertap.com/ or follow us on Linkedin and X.

Join us in shaping the future of engagement.

CleverTap is dedicated to establishing an inclusive culture that welcomes individuals from diverse backgrounds, encouraging them to contribute their unique perspectives to our workplace.