Grc Consultant

Indrasol; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Indrasol in Hyderabad seeks an experienced information security professional to lead client ISO 27001 and SOC 2 implementations from start to finish. You will operate hands-on without micromanagement, delivering compliant ISMS designs and guiding stakeholders across organizations.

You'll conduct gap and risk assessments, craft policies and controls, coordinate with auditors, and support proposals when needed. Practical delivery and client-facing skills are essential.

Qualifications

• 3+ years in GRC / Information Security compliance.
• Hands-on experience delivering ISO 27001 and/or SOC 2 implementations.
• Certified ISO 27001 Lead Implementer (PECB or BSI) must have.
• CISA, CISSP or CISM is a plus.

Responsibilities

• Lead end-to-end ISO 27001 ISMS implementation for clients
• Conduct gap assessments, risk assessments and control design for SOC 2
• Write and implement security policies, procedures and controls
• Manage client stakeholders CISOs, IT heads, compliance teams
• Coordinate with external auditors to get clients across the finish line
• Support proposal writing and client scoping when needed

Skills

GRC / Information Security

ISO 27001

SOC 2

Client communication

Risk assessment

Job description

About the Role

We're looking for someone who has actually done this not just advised on it. You'll be the person who walks into a client's organization, assesses where they stand, and gets them to ISO 27001 and/or SOC 2 compliance. No hand-holding, no micromanagement.

What You'll Do

• Lead end-to-end ISO 27001 ISMS implementation for clients
• Conduct gap assessments, risk assessments and control design for SOC 2
• Write and implement security policies, procedures and controls
• Manage client stakeholders CISOs, IT heads, compliance teams
• Coordinate with external auditors to get clients across the finish line
• Support proposal writing and client scoping when needed

What We're Looking For

• 3+ years in GRC / Information Security compliance
• Hand-on experience delivering ISO 27001 and/or SOC 2 implementations
• Background from Big 4/5 or reputed consulting firm strongly preferred
• Certified ISO 27001 Lead Implementer (PECB or BSI) must have
• CISA, CISSP or CISM is a plus
• Strong client communication skills roles and responsibilities

Important

Please apply only if you have personally delivered ISO 27001 and/or SOC 2 implementation projects for clients.