GRC

Deloitte Shared Services India; Bengaluru; On-site; INR 2,000,000 - 2,500,000; Full time

Job summary

Deloitte Shared Services India in Bengaluru seeks a GRC Specialist with 6+ years in cybersecurity controls, control testing, evidence validation, risk assessments and audit support. You will work with technology and security teams to assess control effectiveness, align with ISO 27001/NIST CSF, manage due diligence and respond to audits, while maintaining documentation and remediation tracking.

Collaborate with cross-functional teams to implement controls, improve security posture, and ensure

Qualifications

• 6+ years in Cybersecurity GRC, control testing, and risk & compliance roles.
• Strong understanding of control effectiveness assessment and regulatory requirements.
• Experience with evidence validation, audit support, and remediation tracking.

Responsibilities

• Perform cybersecurity control assessments, testing, and effectiveness reviews.
• Validate security controls and supporting evidence for audit and compliance requirements.
• Assess controls across Cryptography/PKI, DLP, Endpoint Security, and Network Security.
• Identify control gaps, weaknesses, risks, and recommend remediation actions.
• Manage cybersecurity due diligence questionnaires from clients, vendors, and partners.
• Coordinate with internal stakeholders to collect and validate technical evidence.
• Support internal, regulatory, and external audits, including evidence collection and remediation tracking.
• Interpret cybersecurity requirements and translate them into technical control expectations and validation approaches.
• Maintain accurate documentation, reporting, and control assessment records.
• Track risks, remediation activities, questionnaires, and compliance requirements.
• Stay updated on cybersecurity threats, regulatory requirements, and industry best practices.

Skills

Cybersecurity GRC

Control testing

Security control assessment

Evidence validation

Audit support

Stakeholder management

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

ServiceNow GRC

IBM OpenPages

RSA Archer

MetricStream

AWS security controls

Azure security controls

Job description

GRC Specialist Cybersecurity Controls

Experience: 6+ Years
Role: GRC Specialist / Cybersecurity GRC
Domain: Cybersecurity, Risk & Compliance

Job Overview

We are looking for a GRC Specialist with strong experience in cybersecurity controls, control testing, evidence validation, risk assessments, and audit support. The role will involve working closely with technology and security teams to assess the effectiveness of cybersecurity controls and ensure alignment with regulatory and organizational requirements.

Key Responsibilities

• Perform cybersecurity control assessments, testing, and effectiveness reviews.
• Validate security controls and supporting evidence for audit and compliance requirements.
• Assess controls across Cryptography/PKI, DLP, Endpoint Security, and Network Security.
• Identify control gaps, weaknesses, risks, and recommend remediation actions.
• Manage cybersecurity due diligence questionnaires from clients, vendors, and partners.
• Coordinate with internal stakeholders to collect and validate technical evidence.
• Support internal, regulatory, and external audits, including evidence collection and remediation tracking.
• Interpret cybersecurity requirements and translate them into technical control expectations and validation approaches.
• Maintain accurate documentation, reporting, and control assessment records.
• Track risks, remediation activities, questionnaires, and compliance requirements.
• Stay updated on cybersecurity threats, regulatory requirements, and industry best practices.

Required Skills

• 6+ years of experience in Cybersecurity GRC, Cyber Control Testing, Security Control Assessment, or a similar role.
• Strong understanding of cybersecurity controls and control effectiveness assessment.
• Hands-on knowledge of:
  • Cryptography & PKI
  • TLS / Certificates
  • Data Loss Prevention (DLP)
  • Endpoint Security
  • Network Security
• Experience with ISO 27001, NIST CSF, and CIS Controls.
• Strong experience in evidence validation, audit support, risk assessment, and compliance activities.
• Excellent analytical, documentation, communication, and stakeholder management skills.

Good to Have

• Experience with ServiceNow GRC, IBM OpenPages, RSA Archer, or MetricStream.
• Exposure to AWS/Azure security controls.
• Experience with automation or scripting for evidence collection.
• Certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer.

Education

Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.