Job Description & How to Apply Below
Role Overview
The Cybersecurity GRC Consultant will work with clients across industries to assess, design, implement, and improve cybersecurity governance, risk, compliance, privacy, and resilience programs. The role requires strong consulting capability, audit experience, stakeholder management skills, and the ability to translate technical and regulatory requirements into actionable business controls.
The consultant will contribute to engagements involving ISO standards, NIST-based assessments, Indian financial-sector regulations, privacy compliance, third-party risk management, cyber risk assessment, policy development, awareness programs, and audit readiness.
Key Responsibilities
Conduct cybersecurity GRC consulting, assessment, audit, and advisory engagements for client organizations.
Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.
Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.
Conduct cybersecurity posture assessments, maturity assessments, control effectiveness reviews, and compliance gap assessments.
Assess client environments against relevant frameworks and standards, including:
ISO/IEC 27001:2022
NIST Cybersecurity Framework and related NIST guidance
SOC 2 Type II requirements
Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirements
General Data Protection Regulation (GDPR)
Data privacy principles, privacy governance, and privacy-by-design requirements
RBI cybersecurity, IT governance, outsourcing, digital-payment, and related regulatory requirements
SEBI cybersecurity and cyber-resilience requirements
IRDAI cybersecurity, information security, and related regulatory requirements
Lead or support cyber risk management activities, including risk identification, control mapping, risk scoring, treatment planning, risk-register maintenance, and management reporting.
Conduct Third-Party Risk Management (TPRM) assessments, including vendor due diligence, cybersecurity questionnaires, risk evaluation, contractual security requirements, and remediation tracking.
Support SOC 2 Type II readiness reviews, control design assessments, evidence reviews, and ongoing compliance monitoring.
Develop, review, and enhance cybersecurity policies, standards, procedures, guidelines, frameworks, registers, and process documentation.
Prepare client deliverables such as assessment reports, audit reports, gap-analysis reports, compliance matrices, risk registers, remediation roadmaps, executive presentations, and management dashboards.
Conduct cybersecurity awareness and training programs for employees, management, and relevant stakeholders.
Facilitate client workshops, interviews, walkthroughs, evidence reviews, risk discussions, and leadership presentations.
Track observations, nonconformities, risks, action plans, and closure evidence through the engagement lifecycle.
Collaborate with technical, legal, privacy, business, audit, and compliance stakeholders to ensure practical implementation of cybersecurity controls.
Keep abreast of evolving cybersecurity regulations, privacy requirements, threat trends, and industry best practices.
Contribute to proposal development, scoping, pre-sales discussions, statements of work, and client presentations where required.
Required Experience and Skills
5–6 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
Demonstrated experience working directly with clients in a consulting, advisory, audit, or assurance capacity.
Hands-on experience in ISO/IEC 27001 implementation, gap assessment, internal audit, risk assessment, control documentation, or certification-readiness engagements.
Strong understanding of NIST…
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×