Cybersecurity

Protiviti India; Mumbai Suburban, Navi Mumbai; On-site; INR 1,200,000 - 1,900,000; Full time

Benefits offered by this job

Job summary

Protiviti India in Mumbai is seeking an experienced Cybersecurity & Data Privacy professional to lead engagements across cybersecurity, IT risk, data privacy, and GRC consulting. You will drive assessments, audits, and regulatory reviews while guiding teams and collaborating with CXOs to shape remediation roadmaps.

The role requires 5–14 years of related experience and a strong background in ISO 27001, GDPR, NIST, cloud security, and third-party risk management.

Qualifications

• B.Tech / BE / MCA / BCA / B.Sc / MBA
• 5-14 years of relevant experience

Responsibilities

• Lead Cybersecurity, IT Risk, and GRC consulting engagements.
• Conduct Cybersecurity Maturity Assessments, IT Risk Assessments, and Technology Risk Reviews.
• Perform IT Audits and security assessments covering Governance, Cloud Security, Network Security, SOC Operations, IAM/PAM, Vulnerability Management, and Third-Party Risk.
• Execute cloud security reviews across AWS, Azure, and GCP.
• Conduct compliance assessments aligned to ISO 27001, ISO 27701, RBI, SEBI, IRDAI, CERT-In, DPDP Act, GDPR, NIST, PCI DSS, and SWIFT CSP.
• Review SOC processes, incident response capabilities, and security tools such as SIEM, EDR, DLP, IAM, and CSPM.
• Develop cybersecurity policies, governance frameworks, executive reports, and remediation roadmaps.
• Interact with CXO stakeholders and mentor consulting teams.

Skills

Cybersecurity

IT Audit

GRC

ISO 27001 Implementation

IT Risk Management

Data Privacy

Cloud Security

SOC

SIEM

IAM

PAM

Vulnerability Management

Third-Party Risk Management

GDPR

DPDP Act

PCI DSS

NIST

Education

B.Tech / BE / MCA / BCA / B.Sc / MBA

Job description

Job Title: Cybersecurity & Data Privacy (DM/M)

Location: Mumbai (WFO)
Notice Period: Immediate to 30 Days
Experience: 5-14 Years

Job Description

Protiviti is looking for experienced Cybersecurity professionals to lead Cybersecurity, IT Risk, Data Privacy, and GRC consulting engagements. The role involves conducting cybersecurity assessments, IT audits, risk reviews, cloud security assessments, regulatory compliance reviews, and advisory engagements across multiple industries.

Key Responsibilities

• Lead Cybersecurity, IT Risk, and GRC consulting engagements.
• Conduct Cybersecurity Maturity Assessments, IT Risk Assessments, and Technology Risk Reviews.
• Perform IT Audits and security assessments covering Governance, Cloud Security, Network Security, SOC Operations, IAM/PAM, Vulnerability Management, and Third-Party Risk.
• Execute cloud security reviews across AWS, Azure, and GCP.
• Conduct compliance assessments aligned to ISO 27001, ISO 27701, RBI, SEBI, IRDAI, CERT-In, DPDP Act, GDPR, NIST, PCI DSS, and SWIFT CSP.
• Review SOC processes, incident response capabilities, and security tools such as SIEM, EDR, DLP, IAM, and CSPM.
• Develop cybersecurity policies, governance frameworks, executive reports, and remediation roadmaps.
• Interact with CXO stakeholders and mentor consulting teams.

Required Skills

• Cybersecurity
• IT Audit
• GRC
• ISO 27001 Implementation
• IT Risk Management
• Data Privacy
• Cloud Security (AWS/Azure/GCP)
• SOC, SIEM, IAM, PAM
• Vulnerability Management
• Third-Party Risk Management
• GDPR, DPDP Act, PCI DSS, NIST

Qualifications

• B.Tech / BE / MCA / BCA / B.Sc / MBA
• 5-14 years of relevant experience

Preferred Certifications

CISSP, CISM, CISA, CRISC, CCSP, CCSK, ISO 27001/27701 LA/LI, CIPP/E, CIPM, CIPT, Azure/AWS Security Certifications.

Preferred Background

Candidates from Big4, Cybersecurity Consulting, Technology Risk, Internal Audit, GRC, or Data Privacy Advisory with experience across BFSI, Telecom, Energy, or Manufacturing sectors.