GRC Consultant

Insta ICT Solutions Pvt Ltd.; Pune District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Insta ICT Solutions Pvt Ltd. in Pune seeks a GRC professional to develop and implement governance frameworks, policies and procedures across the organization.

You will conduct enterprise risk assessments, interpret regulatory requirements (ISO 27001, SOC 2, GDPR, HIPAA, DPDP Act in India), prepare for audits, and train stakeholders to embed compliance in systems. Collaborate with IT and business teams to ensure ongoing certification readiness.

Qualifications

• Experience leading GRC programs and policy development.
• Strong understanding of ISO 27001, SOC 2, GDPR, and India DPDP Act.
• Ability to translate regulatory requirements into actionable controls.

Responsibilities

• Establish accountability structures and reporting mechanisms.
• Maintain risk registers and monitor residual risks.
• Perform vendor and third-party risk evaluations.
• Work with GRC platforms (RSA Archer, ServiceNow GRC, SAP GRC).
• Conduct workshops, training, and awareness programs.
• Partner with legal, IT, and business teams to align compliance efforts.

Skills

Governance frameworks

Risk assessments

Regulatory compliance

Audit readiness

Stakeholder training

Tools

RSA Archer

ServiceNow GRC

SAP GRC

Job description

Job Summary

• Develop and implement governance frameworks, policies, and procedures.
• Conduct enterprise-wide risk assessments and recommend mitigation strategies.
• Interpret and implement regulatory requirements (ISO 27001, SOC 2, GDPR, HIPAA, DPDP Act in India).
• Prepare organizations for internal/external audits and certification readiness.
• Collaborate with IT and business teams to embed compliance into systems.
• Provide clear documentation, reports, and training to stakeholders.

Responsibilities

• Establish accountability structures and reporting mechanisms.
• Maintain risk registers and monitor residual risks.
• Perform vendor and third-party risk evaluations.
• Work with GRC platforms (RSA Archer, ServiceNow GRC, SAP GRC).
• Conduct workshops, training, and awareness programs.
• Partner with legal, IT, and business teams to align compliance efforts.