Grc Consultant

Quess IT Solutions; Mumbai; Hybrid; INR 900,000 - 1,500,000; Full time

Job summary

Quess Corp Limited is seeking a Cybersecurity GRC Consultant for our client in Mumbai. The role requires hands-on experience in cybersecurity consulting, risk assessments, and regulatory compliance across ISO 27001, NIST, SOC 2, and privacy controls.

You will prepare reports, conduct audits, and support continuity planning and vendor risk assessments. The position offers full-time employment in Andheri East, Mumbai, with responsibilities spanning policy development, evidence reviews, and

Qualifications

• 3–4 years of relevant experience in Cybersecurity GRC or related roles.
• Hands‑on experience with ISO/IEC 27001 implementation, gap assessment, and risk assessment.
• Strong understanding of NIST Cybersecurity Framework.
• Experience with RBI, SEBI, and IRDAI cybersecurity requirements.
• Excellent documentation and stakeholder management skills.

Responsibilities

• Conduct cybersecurity GRC consulting, assessment, audit, and advisory engagements.
• Perform ISO/IEC 27001 gap assessments, internal audits, implementation support, risk assessments, control reviews and certification readiness.
• Support ISO 22301 / BCMS engagements, including BIA, risk assessment, continuity planning and documentation.
• Assess client environments against ISO 27001, NIST, SOC 2 Type II, DPDPA, GDPR, RBI, SEBI and IRDAI.
• Develop risk registers, remediation roadmaps, and management dashboards.
• Facilitate client workshops, interviews, and leadership presentations.
• Prepare assessment and audit reports with clear findings and recommendations.
• Collaborate with legal, privacy, and technical stakeholders.

Skills

Cybersecurity GRC

ISO/IEC 27001

Risk assessment

Regulatory compliance

Documentation

Stakeholder management

Vendor risk management

SOC 2 Type II

Education

ISO/IEC 27001:2022 Lead Auditor

ISO 22301 Lead Auditor

CISA

CISM

Tools

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

Job description

Hi,

Greetings from Quess Corp!

We have an exciting opportunity for a Cybersecurity GRC Consultant with Quess Corp Limited, working for our esteemed client 63SATS Cybertech.

About Quess Corp

Quess Corp Limited is a leading workforce and business solutions organization providing technology‑driven staffing, IT solutions, managed services, and workforce management solutions across multiple industries. Quess supports enterprises with specialised technology talent and IT capabilities across areas including Cybersecurity, Cloud & Data Center, Applications & Data, Network & Security, and Digital Engineering.

Visit Quess Corp Official Website

About the Client 63SATS Cybertech

63SATS Cybertech Limited is a cybersecurity solutions provider and a subsidiary of 63 moons technologies Ltd., focused on protecting enterprises, government organisations, and critical infrastructure from cyber risks.

The company offers cybersecurity services across areas including:

• Technology GRC
• ISO 27001
• ISO 22301
• SOC 2 Compliance
• Privacy Regulatory Compliance
• Cybersecurity Regulatory Compliance
• Third-Party Security Risk Assessment
• Application Security Risk Assessment
• Cloud Security Audit
• Cybersecurity Awareness
• Cybersecurity assessments and advisory services

Client Location: FT Tower, 3rd Floor, CTS No. 256 & 257, Suren Road, Chakala, Andheri (East), Mumbai – 400093.

Visit 63SATS Cybertech – Official Website

Job Opportunity – Cybersecurity GRC Consultant

Position: Cybersecurity GRC Consultant
Payroll: Quess Corp Limited
Client: 63SATS Cybertech
Location: Andheri East, Mumbai
Experience: 3–4 years relevant experience
Employment Type: Full-time

Role Overview

We are looking for a knowledgeable and client‑focused Cybersecurity GRC Consultant with hands‑on experience in cybersecurity consulting, assessment, audit, compliance, risk management, privacy, and documentation engagements.

Key Responsibilities

• Conduct cybersecurity GRC consulting, assessment, audit, and advisory engagements.
• Perform ISO/IEC 27001:2022 gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification‑readiness activities.
• Support ISO 22301 / BCMS engagements, including BIA, risk assessment, continuity planning, documentation, and exercises.
• Conduct cybersecurity posture, maturity, control effectiveness, and compliance gap assessments.
• Assess client environments against ISO 27001, NIST, SOC 2 Type II, DPDPA, GDPR, RBI, SEBI, and IRDAI requirements.
• Perform cyber risk management activities including risk identification, control mapping, risk scoring, treatment planning, and risk‑register maintenance.
• Conduct Third‑Party Risk Management (TPRM) assessments, vendor due diligence, security questionnaires, risk evaluation, and remediation tracking.
• Support SOC 2 Type II readiness, control design assessments, evidence reviews, and compliance monitoring.
• Develop and review cybersecurity policies, standards, procedures, guidelines, frameworks, registers, and process documentation.
• Prepare assessment reports, audit reports, gap‑analysis reports, compliance matrices, risk registers, remediation road‑maps, presentations, and management dashboards.
• Conduct cybersecurity awareness and training programs.
• Facilitate client workshops, interviews, walkthroughs, evidence reviews, and leadership presentations.
• Track observations, risks, action plans, and closure evidence throughout the engagement.
• Collaborate with technical, legal, privacy, business, audit, and compliance stakeholders.

Required Skills & Experience

• 3–4 years of relevant experience in Cybersecurity GRC, Information Security Consulting, IT Audit, Risk Advisory, Compliance, or related roles.
• Strong client‑facing consulting, advisory, audit, or assurance experience.
• Hands‑on experience with ISO/IEC 27001 implementation, gap assessment, internal audit, and risk assessment.
• Strong understanding of NIST Cybersecurity Framework.
• Working knowledge of DPDPA, GDPR, privacy governance, data lifecycle controls, consent management, and privacy risk assessments.
• Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory requirements.
• Experience in TPRM and vendor security assessments.
• Experience in cybersecurity posture, maturity, risk, and compliance assessments.
• Familiarity with SOC 2 Type II, Trust Services Criteria, control mapping, and audit evidence.
• Strong documentation, report‑writing, presentation, and stakeholder‑management skills.
• Proficiency in MS Word, Excel, and PowerPoint.

Mandatory Certifications

• ISO/IEC 27001:2022 Lead Auditor
• ISO 22301 Lead Auditor
• CISA

Good-to-Have Certifications

• CISM
• ISO/IEC 42001 Lead Auditor
• Other relevant certifications in Privacy, Risk Management, Cloud Security, SOC, or Business Continuity.

Regards,
Yugandhar K.
Quess Corp Limited