Governance, Risk, and Compliance (GRC) Consultant

Infosys; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Infosys seeks a GRC Consultant to design, implement, and manage governance, risk, and compliance programs. You will conduct enterprise risk assessments, maintain risk registers, and define security policies, standards, procedures, and controls.

Regulatory compliance work spans ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS, SOX, NIST, and COBIT. You will coordinate audits, track remediation, and monitor compliance metrics while collaborating with business and technology teams to mitigate risks and

Qualifications

• Strong understanding of GRC frameworks and methodologies.
• Experience with risk assessment, risk management, and compliance monitoring.
• Knowledge of ISO 27001, NIST CSF, COBIT, SOX, PCI-DSS, GDPR, HIPAA, or SOC frameworks.
• Experience with GRC tools such as ServiceNow GRC, RSA Archer, OneTrust, MetricStream, AuditBoard.
• Understanding of information security controls and cybersecurity best practices.
• Experience in audit management and control testing.
• Strong analytical, documentation, and stakeholder management skills.

Responsibilities

• Define and implement enterprise GRC programs across business lines.
• Perform risk assessments and maintain risk registers with remediation plans.
• Develop and maintain security policies, standards, and controls.
• Support regulatory compliance requirements (ISO 27001, SOC 2, GDPR, etc.).
• Coordinate internal and external audits and track remediation activities.
• Monitor compliance metrics and prepare governance dashboards.
• Collaborate with business and technology teams on risk mitigation.
• Address third‑party/vendor risk assessments and governance initiatives.

Skills

GRC frameworks

Risk assessment

Compliance monitoring

Regulatory frameworks

GRC tools

Security controls

Audit management

Documentation & stakeholder mgmt

Tools

ServiceNow GRC

RSA Archer

OneTrust

MetricStream

AuditBoard

Job description

GRC Consultant • Primary skills:Technology->SAP Functional->SAP GRC Implement and manage Governance, Risk, and Compliance (GRC) programs. Perform enterprise risk assessments and maintain risk registers. Define, review, and update security policies, standards, procedures, and controls. Support regulatory compliance requirements such as ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS, SOX, NIST, and COBIT. Conduct control testing, compliance assessments, and gap analyses. Coordinate internal and external audits and track remediation activities. Monitor compliance metrics and prepare governance reports and dashboards. Work with business and technology teams to identify, assess, and mitigate risks. Ensure third-party/vendor risk assessments are completed and reviewed. Support cybersecurity governance initiatives and risk treatment plans. Drive awareness programs related to risk and compliance requirements.

Required Skills

• Strong understanding of GRC frameworks and methodologies.
• Experience with risk assessment, risk management, and compliance monitoring.
• Knowledge of ISO 27001, NIST CSF, COBIT, SOX, PCI-DSS, GDPR, HIPAA, or SOC frameworks.
• Experience with GRC tools such as: ServiceNow GRC RSA Archer OneTrust MetricStream AuditBoard
• Understanding of information security controls and cybersecurity best practices.
• Experience in audit management and control testing.
• Strong analytical, documentation, and stakeholder management skills.

Preferred Skills

• Experience in cloud compliance (Azure, AWS, GCP).
• Knowledge of third-party risk management (TPRM).
• Familiarity with Cybersecurity, IAM, Data Privacy, and Security Operations.
• Experience in enterprise risk governance and reporting.