Grc Consultant

FORNAX TECHNOLOGY SERVICES PRIVATE LIMITED; Dadri; On-site; INR 900,000 - 1,500,000; Full time

Job summary

FORNAX Technology Services Private Limited in India seeks a seasoned ISMS professional to implement and audit ISO 27001:2022, ISO 22301:2019, and NIST CSF. You will conduct risk assessments, gap analyses, and maintain ISMS documentation.

The role requires leading audits, mock audits, control testing, and compliance reviews to ensure certification readiness, manage stakeholders, run security awareness programs, KPI dashboards, and audit artifacts daily.

Qualifications

• Lead Auditor/Lead Implementer certification is mandatory.
• Experience with ISO frameworks and governance programs.
• Knowledge of risk assessment and gap analysis methodologies.

Responsibilities

• Implementing and auditing ISO 27001:2022, ISO 22301:2019, and NIST frameworks.
• Developing security policies, procedures, standards, and ISMS documentation aligned with security standards.
• Conducting internal audits, mock audits, control testing, and compliance reviews.
• Managing stakeholders, security awareness programs, KPI reporting, dashboards, and audit artifacts.
• Holding ISO 2701 Lead Auditor/Lead Implementer certification (mandatory), with additional certifications preferred.

Skills

ISO 27001

ISO 22301

NIST CSF

Audit & Compliance

Risk Assessment

Job description

1. Implementing and auditing ISO 27001:2022, ISO 22301:2019, and NIST frameworks, including risk assessments and compliance gap analysis.
2. Developing security policies, procedures, standards, and ISMS documentationaligned with security standards.
3. Conducting internal audits, mock audits, control testing, and compliance reviewsto ensure audit readiness and certification success.
4. Managing stakeholders, security awareness programs, KPI reporting, dashboards, and audit artifactson a day-to-day basis.
5. Holding ISO 2701 Lead Auditor/Lead Implementer certification (mandatory), with additional certifications like CISA, CISM, CISSP, or NIST CSF preferred.