Job Title: GRC Analyst Shift Timing- RotationalWork mode- Remote, IndiaRole Overview:Lead the end‑to‑end vulnerability management lifecycle—spanning discovery, analysis, reporting, remediation guidance, and closure—for Protera Technologies and its clients. This client‑facing role blends deep hands‑on expertise with vulnerability tooling (Nessus, Qualys, etc.) and clear, audience‑appropriate communication to executives, application owners, and engineers. You will design and deliver security reports and dashboards, drive remediation outcomes against SLAs, and strengthen compliance with frameworks such as NIST and PCI DSS.Core Responsibilities:·       Lifecycle Ownership: Manage the full vulnerability lifecycle from asset onboarding and scan configuration through triage, tracking, remediation coaching, and verified closure.·       Standards &amp; Compliance: Ensure alignment with applicable configuration and security standards (e.g., NIST, PCI DSS) and provide audit ready evidence.·       Assessments &amp; Reporting: Perform vulnerability and configuration assessments; deliver timely, accurate assessment reports tailored for technical and non‑technical stakeholders.·       Dashboards &amp; Data Visualization: Design, implement, and maintain dashboards and visualizations that demonstrate assessment coverage, risk posture, and remediation effectiveness for internal and client audiences.Security Reporting:·       Produce executive summaries, technical deep‑dives, and KPI packs (weekly/monthly/quarterly) for Protera Technologies clients.·       Track and report SLA performance, exposure trends, MTTR, risk reduction, and exception/acceptance statuses.·       Validate data quality across scanners and CMDB sources; reconcile false positives/duplicates; document scope and methodology.·       Present findings in governance forums, QBRs, and remediation working sessions; capture actions and owners.·       Process &amp; Platform Enablement: Implement and refining processes, capabilities, and techniques for vulnerability management and security testing; drive ongoing platform maintenance and upgrades.·       Threat Monitoring: Track vulnerability disclosures and threat intelligence; rapidly assess relevance, prioritize assets, and coordinate accelerated scans/mitigations.·       Alerting &amp; Communication: Communicate actionable alerts to internal and external teams regarding threats to network, application, and OS platforms for Protera Technologies and its clients.·       Escalation &amp; Guidance: Serve as an escalation point for scanning and testing issues; provide clear remediation guidance and compensating controls.·       Risk &amp; Compliance Support: Support risk assessments, control selection, and corrective action plans; assist with audit requests and evidence collection.·       KPI/Metric Development: Define, implement, and continuously improve KPIs/OKRs and operational metrics related to vulnerability management and reporting.·       Knowledge Management: Develop and maintain security writeups, standard operating procedures, runbooks, and client‑facing documentation.·       Confidentiality: Maintain strict confidentiality and handle sensitive client data responsibly.RequirementsRequired Experience &amp; Skills:·       7+ years in Vulnerability Assessment / Vulnerability Management.·       Proficiency with vulnerability tools: Nessus, Qualys (plus experience with AppScan, Trustwave, Burp Suite, Nipper is a strong advantage).·       Solid grasp of application security concepts and assessment methodologies.·       Strong knowledge of core cybersecurity concepts (threats, vulnerabilities, risk, confidentiality/integrity/availability, cryptography).·       Expertise with common frameworks and taxonomies: CVSS, OWASP Top 10.·       Knowledge of system, application, and database hardening techniques and secure configuration benchmarks.·       Strong understanding of Internet security and networking protocols.·       Experience in cloud security (IaaS/PaaS/SaaS) and risks unique to cloud environments.·       Ability to interface confidently with both technical and non‑technical stakeholders; proven client‑facing communication skills (written and verbal).·       Demonstrated ability to work independently, meet schedules, and deliver to timelines in a distributed team environment.·       Analytical mindset with the ability to identify, prioritize, and explain advanced threats and misconfigurations.·       Strong security reporting acumen—turning scan data into clear narratives, visuals, and decisions for executives and engineers.·       Availability outside of standard working hours for high‑priority events.Nice to Have:·       Scripting skills (Python, Perl, Shell/Bash) for automation, data wrangling, and integration.·       Software development background or familiarity with SDLC/Develops practices.·       Experience building reports/dashboards in BI or native security platforms (e.g., Qualys/Nessus dashboards, Power BI, Tableau).·       Ability to collaborate across cultures/time zones; adaptable, detail‑oriented, and comfortable with changing priorities.·       Positive, constructive approach with strong teamwork and stakeholder management. Benefits<h3>About Company</h3>Protera Technologies (<a href="https://www.protera.com)">www.protera.com)</a> is an SAP Certified, Global Total IT Outsourcing Provider for SAP-centric organizations founded in the mid-1990s. We have been the SAP-on-cloud pioneer since running the world’s first SAP production instance on a public cloud. Today, we manage thousands of SAP and related IT workloads on Microsoft Azure, Google Cloud, and Amazon Web Services (AWS). Headquartered in Chicago, IL, with offices in Athens, Greece, and Mumbai, India, Protera delivers world-class cloud hosting, application management, and professional services focused on total customer satisfaction. For more information, visit www.protera.com.

By 2050, the world's population will surpass 10 billion people. To feed the current population and future generations we need to address global food challenges, today. How can we solve this problem without overwhelming the planet? And how can we deliver higher quality, more nutritious food for everyone? With Protera&rsquo;s Natural Intelligence&trade; technology, we believe the future is already here. Protera&rsquo;s technology uses predictive algorithms that calculate millions of amino acid combinations and simulate protein patterns in a matter of seconds. Our technology is based in Deep Learning and allows us to shine a light on a previously untapped universe of proteins. We craft protein-based ingredients faster and more affordably than ever before, unlocking a revolution in human health, reducing damage to the environment, and preventing food waste. Our first products already exceed the performance, scalability, and functionality of existing alternative ingredients. Please visit proterabio.com, contact us at (415)-256-7667, or email us at info@proterabio.com

GRC Analyst

Job Title: GRC Analyst Shift Timing- RotationalWork mode- Remote, IndiaRole Overview:Lead the end‑to‑end vulnerability management lifecycle—spanning discovery, analysis, reporting, remediation guidance, and closure—for Protera Technologies and its clients. This client‑facing role blends deep hands‑on expertise with vulnerability tooling (Nessus, Qualys, etc.) and clear, audience‑appropriate communication to executives, application owners, and engineers. You will design and deliver security reports and dashboards, drive remediation outcomes against SLAs, and strengthen compliance with frameworks such as NIST and PCI DSS.Core Responsibilities:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lifecycle Ownership: Manage the full vulnerability lifecycle from asset onboarding and scan configuration through triage, tracking, remediation coaching, and verified closure.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Standards &amp; Compliance: Ensure alignment with applicable configuration and security standards (e.g., NIST, PCI DSS) and provide audit ready evidence.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Assessments &amp; Reporting: Perform vulnerability and configuration assessments; deliver timely, accurate assessment reports tailored for technical and non‑technical stakeholders.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dashboards &amp; Data Visualization: Design, implement, and maintain dashboards and visualizations that demonstrate assessment coverage, risk posture, and remediation effectiveness for internal and client audiences.Security Reporting:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Produce executive summaries, technical deep‑dives, and KPI packs (weekly/monthly/quarterly) for Protera Technologies clients.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Track and report SLA performance, exposure trends, MTTR, risk reduction, and exception/acceptance statuses.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Validate data quality across scanners and CMDB sources; reconcile false positives/duplicates; document scope and methodology.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Present findings in governance forums, QBRs, and remediation working sessions; capture actions and owners.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Process &amp; Platform Enablement: Implement and refining processes, capabilities, and techniques for vulnerability management and security testing; drive ongoing platform maintenance and upgrades.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Threat Monitoring: Track vulnerability disclosures and threat intelligence; rapidly assess relevance, prioritize assets, and coordinate accelerated scans/mitigations.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Alerting &amp; Communication: Communicate actionable alerts to internal and external teams regarding threats to network, application, and OS platforms for Protera Technologies and its clients.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Escalation &amp; Guidance: Serve as an escalation point for scanning and testing issues; provide clear remediation guidance and compensating controls.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Risk &amp; Compliance Support: Support risk assessments, control selection, and corrective action plans; assist with audit requests and evidence collection.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; KPI/Metric Development: Define, implement, and continuously improve KPIs/OKRs and operational metrics related to vulnerability management and reporting.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Knowledge Management: Develop and maintain security writeups, standard operating procedures, runbooks, and client‑facing documentation.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Confidentiality: Maintain strict confidentiality and handle sensitive client data responsibly.RequirementsRequired Experience &amp; Skills:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7+ years in Vulnerability Assessment / Vulnerability Management.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Proficiency with vulnerability tools: Nessus, Qualys (plus experience with AppScan, Trustwave, Burp Suite, Nipper is a strong advantage).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Solid grasp of application security concepts and assessment methodologies.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Strong knowledge of core cybersecurity concepts (threats, vulnerabilities, risk, confidentiality/integrity/availability, cryptography).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Expertise with common frameworks and taxonomies: CVSS, OWASP Top 10.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Knowledge of system, application, and database hardening techniques and secure configuration benchmarks.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Strong understanding of Internet security and networking protocols.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in cloud security (IaaS/PaaS/SaaS) and risks unique to cloud environments.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ability to interface confidently with both technical and non‑technical stakeholders; proven client‑facing communication skills (written and verbal).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Demonstrated ability to work independently, meet schedules, and deliver to timelines in a distributed team environment.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Analytical mindset with the ability to identify, prioritize, and explain advanced threats and misconfigurations.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Strong security reporting acumen—turning scan data into clear narratives, visuals, and decisions for executives and engineers.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Availability outside of standard working hours for high‑priority events.Nice to Have:·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Scripting skills (Python, Perl, Shell/Bash) for automation, data wrangling, and integration.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Software development background or familiarity with SDLC/Develops practices.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience building reports/dashboards in BI or native security platforms (e.g., Qualys/Nessus dashboards, Power BI, Tableau).·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ability to collaborate across cultures/time zones; adaptable, detail‑oriented, and comfortable with changing priorities.·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Positive, constructive approach with strong teamwork and stakeholder management.&nbsp;Benefits<h3>About Company</h3>Protera Technologies (<a href="https://www.protera.com)">www.protera.com)</a> is an SAP Certified, Global Total IT Outsourcing Provider for SAP-centric organizations founded in the mid-1990s. We have been the SAP-on-cloud pioneer since running the world’s first SAP production instance on a public cloud. Today, we manage thousands of SAP and related IT workloads on Microsoft Azure, Google Cloud, and Amazon Web Services (AWS). Headquartered in Chicago, IL, with offices in Athens, Greece, and Mumbai, India, Protera delivers world-class cloud hosting, application management, and professional services focused on total customer satisfaction. For more information, visit www.protera.com.

GRC Analyst

About the Job

About the Company

Protera

Similar Jobs

Lead Security Engineer

Lead Security Engineer

Senior GRC Analyst

Senior GRC Analyst

SOC Analyst-L2

SOC Analyst-L2

SOC Analyst (L2)

SOC Analyst (L2)

SOC Analyst

SOC Analyst

Corporate Security Engineer

Corporate Security Engineer

Cybersecurity Analyst II - SOC & GRC

Cybersecurity Analyst II - SOC & GRC

Senior SOC Analyst

Senior SOC Analyst

SOC Analyst

SOC Analyst

Information Security Analyst

Information Security Analyst