Grc Consultant

Insight Global; Hyderabad; Remote; INR 2,000,000 - 4,000,000; Full time

Job summary

Insight Global is seeking a Senior Consultant, Governance, Risk & Compliance (GRC) to lead and execute cybersecurity governance, risk management, and compliance initiatives. You will partner with senior leaders to drive a risk-based program that protects assets while enabling business objectives.

The role combines strategic leadership with hands-on execution and will oversee a small GRC team. Remote in India; strong communication with executives is essential.

Qualifications

• 15+ years of experience in cybersecurity, governance, risk management, compliance, audit, or related disciplines, including leadership experience.
• Experience building and operating cybersecurity GRC programs, developing executive and Board-level communications, and partnering effectively with senior executives and business leaders.
• Strong knowledge of cybersecurity frameworks, risk management methodologies, third-party risk management, regulatory compliance, and security governance practices.

Responsibilities

• Develop, implement, and maintain cybersecurity policies, standards, procedures, and governance frameworks.
• Lead governance committees, policy exception processes, and cross-functional accountability for cybersecurity risk management.
• Manage cybersecurity risk assessments, risk registers, risk treatment plans, and risk reporting activities.
• Oversee vendor security assessments, due diligence reviews, contract security requirements, and remediation efforts.
• Lead cybersecurity compliance initiatives, control assessments, audit readiness activities, and regulatory alignment efforts.
• Develop and maintain cybersecurity metrics, dashboards, KRIs, KPIs, and reporting processes.
• Lead cybersecurity awareness, training, and culture-building initiatives.
• Act as a trusted cybersecurity advisor to business and technology leaders.
• Lead, mentor, and develop a small team of GRC professionals.
• Hands-on: risk assessments, policy development, audit support, and board-level reporting.

Skills

GRC leadership

Executive comms

Risk management

Regulatory compliance

Third-party risk

Security governance

Stakeholder management

Job description

Job Title Senior Consultant, GRC

Location: Remote in India

Shift Time : 3:30 PM-11:30 PM- IST.

EST : 6:00 AM to 3:0 PM

Description

Required Skills & Experience

• 15+ years of experience in cybersecurity, governance, risk management, compliance, audit, or related disciplines, including leadership experience.
• Demonstrated experience building and operating cybersecurity GRC programs, developing executive and Board-level communications, and partnering effectively with senior executives and business leaders.
• Strong knowledge of cybersecurity frameworks, risk management methodologies, third-party risk management, regulatory compliance, and security governance practices.

Nice to Have Skills & Experience

• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CGEIT preferred.
• Experience in the pharmaceutical, biotechnology, healthcare, or other highly regulated industries preferred.

Job Description

We are seeking a Senior Consultant, Governance, Risk & Compliance (GRC) who will be responsible for leading and executing cybersecurity governance, risk management, compliance, security assurance, and third-party risk management initiatives. This position partners closely with business, technology, and executive stakeholders to drive a risk-based cybersecurity program that protects organizational assets while enabling business objectives.

This role combines strategic leadership with hands-on execution and provides oversight of a small team of GRC professionals. The ideal candidate will serve as a trusted advisor to senior leadership, translating cybersecurity risks into business terms and supporting informed risk-based decision-making.

Key Responsibilities

Cybersecurity Governance

Develop, implement, and maintain cybersecurity policies, standards, procedures, and governance frameworks.

Lead governance committees, policy exception processes, and cross-functional accountability for cybersecurity risk management.

Enterprise Risk Management

Manage cybersecurity risk assessments, risk registers, risk treatment plans, and risk reporting activities.

Drive a risk-based approach to cybersecurity priorities, investments, and business decisions.

Third-Party Risk Management

Oversee vendor security assessments, due diligence reviews, contract security requirements, and remediation efforts.

Partner with Procurement, Legal, Privacy, and business stakeholders to manage risk throughout the vendor lifecycle.

Compliance, Audit & Security Assurance

Lead cybersecurity compliance initiatives, control assessments, audit readiness activities, and regulatory alignment efforts.

Manage remediation of audit findings, control gaps, compliance issues, and regulatory commitments.

Metrics, Reporting & Executive Communications

Develop and maintain cybersecurity metrics, dashboards, KRIs, KPIs, and reporting processes.

Prepare and present cybersecurity updates, risk assessments, and strategic recommendations to executive leadership and governance bodies.

Security Awareness & Culture

Lead cybersecurity awareness, training, and culture-building initiatives.

Measure program effectiveness and drive continuous improvement through communications and education campaigns.

Cross-Functional Collaboration

Act as a trusted cybersecurity advisor to business and technology leaders.

Facilitate cross-functional discussions and drive resolution of cybersecurity, compliance, and third-party risk issues.

Team Leadership

Lead, mentor, and develop a small team of GRC professionals.

Establish priorities, performance expectations, and career development plans.

Foster a collaborative, customer-focused, and results-oriented culture.

Hands-On Execution

Conduct cybersecurity risk assessments, vendor assessments, policy development, compliance reviews, audit support, executive reporting, and board-level presentation development.

Manage day-to-day GRC operations and ensure timely execution of governance, risk, compliance, and reporting activities.