GRC Auditor

Allied Boston Consultants India; Sector 10, Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Allied Boston Consultants India is seeking an experienced information security professional to lead audits and gap assessments against ISO standards and other frameworks. You will evaluate regulatory compliance and perform risk assessments for clients, preparing detailed reports and recommending corrective actions.

Responsibilities include developing policies, collaborating with clients, and supporting external audits.

Qualifications

• Engineering degree in IT/CS/Cybersecurity or related field.
• ISO 27001:2022 Lead Auditor certification.
• Knowledge of information security frameworks, DPDP Act, GDPR, and cybersecurity regulations.
• Certifications such as CISA, CISM, CRISC, CEH, ISO 27701 LA, or ISO 22301 LA.
• Strong analytical, documentation, communication, and client-handling skills.

Responsibilities

• Conduct information security audits and gap assessments against ISO 27001, 27701, 22301, NIST CSF, COBIT, PCI DSS, and CIS Controls.
• Assess regulatory compliance with RBI, SEBI CSCRF, IRDAI, UIDAI, CERT-In, and other applicable guidelines.
• Perform IT risk assessments, security control testing, and third-party/vendor risk assessments.
• Develop and review security policies, procedures, risk registers, and compliance documentation.
• Prepare audit reports, identify security gaps, and recommend corrective actions.
• Coordinate with clients and support regulatory inspections and external audits.

Skills

Analytical thinking

Documentation

Communication

Client handling

Education

Engineering degree in IT/CS/Cybersecurity

CISA / CISM / CRISC / CEH / ISO 27701 LA / ISO 22301 LA

Tools

ISO 27001 Lead Auditor

Job description

Key Responsibilities:

• Conduct information security audits and gap assessments against ISO 27001, ISO 27701, ISO 22301, NIST CSF, COBIT, PCI DSS, and CIS Controls.
• Assess regulatory compliance with RBI, SEBI CSCRF, IRDAI, UIDAI, CERT-In, and other applicable guidelines.
• Perform IT risk assessments, security control testing, and third-party/vendor risk assessments.
• Develop and review security policies, procedures, risk registers, and compliance documentation.
• Prepare audit reports, identify security gaps, and recommend corrective actions.
• Coordinate with clients and support regulatory inspections and external audits.

Qualifications & Skills:

• An engineering degree in IT, Computer Science, Cybersecurity, or a related discipline is preferred.
• ISO 27001:2022 Lead Auditor certification.
• Knowledge of information security frameworks, DPDP Act, GDPR, and cybersecurity regulations.
• Certifications such as CISA, CISM, CRISC, CEH, ISO 27701 LA, or ISO 22301 LA.
• Strong analytical, documentation, communication, and client-handling skills.