GRC Consultant

Tekskills Inc.; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Tekskills Inc. is seeking a cybersecurity governance professional in India to lead policy development, risk assessments and regulatory compliance. The role requires coordinating with multiple departments and ensuring adherence to standards such as NIST, ISO 27001, and COBIT.

The ideal candidate will have 5+ years of relevant experience, strong analytical and communication skills, and the ability to drive cross-functional initiatives across the organization.

Qualifications

• 5+ years of relevant experience in cybersecurity governance, risk or compliance.
• Experience in developing and implementing security policies and procedures.

Responsibilities

• Develop and implement cybersecurity policies, standards, and procedures in line with best practices (e.g., NIST, ISO 27001, COBIT).
• Conduct regular reviews and updates of security policies to ensure they remain current and effective.
• Coordinate with departments to ensure compliance with security policies and standards.
• Perform risk assessments to identify and evaluate security risks.
• Develop risk mitigation strategies and work with stakeholders to implement controls.
• Monitor and report on the effectiveness of risk management activities.
• Ensure compliance with regulatory requirements such as GDPR, HIPAA, PCI-DSS.
• Conduct internal audits and assessments to verify compliance with security policies and regulatory requirements.
• Prepare for and manage external audits, working with auditors to provide documentation.

Skills

Analytical skills

Problem-solving

Communication skills

Interpersonal skills

Cross-functional collaboration

Detail-oriented

Organizational skills

GRC tools

Tools

GRC software

Job description

Please focus on sourcing immediate joiners who are local to Chennai and familiar with the local language. This will greatly enhance our chances of finding the right fit quickly. We are looking for candidates who can join immediately.

exp : relevant 5+yrs

Key Responsibilities

• Governance:
  • Develop and implement cybersecurity policies, standards, and procedures in line with industry best practices (e.g., NIST, ISO 27001, COBIT).
  • Conduct regular reviews and updates of security policies to ensure they remain current and effective.
  • Coordinate with various departments to ensure compliance with security policies and standards.
• Risk Management:
  • Perform risk assessments to identify and evaluate security risks.
  • Develop risk mitigation strategies and work with stakeholders to implement appropriate controls.
  • Monitor and report on the effectiveness of risk management activities.
• Compliance:
  • Ensure compliance with regulatory requirements, such as GDPR, HIPAA, PCI-DSS, and other relevant standards.
  • Conduct internal audits and assessments to verify compliance with security policies and regulatory requirements.
  • Prepare for and manage external audits, working closely with auditors to provide necessary documentation and information.

Skills

• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Ability to work effectively with cross-functional teams and stakeholders.
• Detail-oriented with strong organizational skills.
• Proficiency in using GRC tools and software.