Grc Consultant

Net Connect; Mumbai, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Net Connect in Mumbai is seeking an experienced cybersecurity professional to drive governance, risk management, and regulatory compliance across the organization.

The role focuses on implementing security controls, managing audits, and coordinating with business, technology, audit, and security teams to reduce risk. It emphasizes KPI reporting and awareness, including third-party risk oversight.

Qualifications

• Strong knowledge of security frameworks ISO 27001, NIST CSF, CIS Controls, and COBIT.
• Experience in cyber risk assessments, compliance reviews, control testing, and audit coordination.
• Understanding of regulatory requirements and industry standards.
• Experience in policy development, governance processes, and risk reporting.
• Ability to collaborate with business, technology, audit, and security teams to drive compliance and risk reduction initiatives.

Responsibilities

• Cyber Security Governance & Policy Management
• Risk Assessment & Risk Management
• Regulatory Compliance & Audit Management
• Security Controls & Framework Implementation
• Third-Party Risk Management
• Security Metrics/KPIs, Reporting & Awareness
• Stakeholder Management and Communication

Skills

Cyber governance

Policy management

Risk assessment

Regulatory compliance

Audit coordination

Stakeholder comms

Job description

• Cyber Security Governance & Policy Management
• Risk Assessment & Risk Management
• Regulatory Compliance & Audit Management
• Security Controls & Framework Implementation
• Third-Party Risk Management
• Security Metrics/KPIs, Reporting & Awareness
• Stakeholder Management and Communication

Expertise:

• Strong knowledge of security frameworks such as ISO 27001, NIST CSF, CIS Controls, and COBIT.
• Experience in cyber risk assessments, compliance reviews, control testing, and audit coordination.
• Understanding of regulatory requirements and industry standards.
• Experience in policy development, governance processes, and risk reporting.
• Ability to collaborate with business, technology, audit, and security teams to drive compliance and risk reduction initiatives.