GRC Consultant - Audit and Compliance

Quasarcybertech; Nashik District, Pune District; Sur place; INR 900 000 - 1 500 000; Plein temps

Avantages offerts par ce poste

Sponsored certifications

Travel allowances

Résumé du poste

QuassrCyberTech is seeking a hands-on GRC Consultant in Nashik, India to manage cybersecurity audits, regulatory compliance, risk assessments, and client engagements. The role involves coordinating with client teams, delivering audit-ready documentation, and driving controls testing and remediation.

You will work on RBI, UIDAI, IRDAI guidelines, ISO/IEC 27001 assessments, and privacy/privacy impact reviews, with opportunities to grow in AI governance and compliance automation.

Qualifications

• 2.5–3.5 years in GRC, IT audit, along with cybersecurity consulting.
• Hands-on exposure to client-facing audits and compliance engagements.
• Experience with banking-sector cybersecurity audits and regulatory requirements.
• Practical exposure to RBI, UIDAI, IRDAI, and ISO/IEC 27001 assessments.
• Understanding of SOC 1/SOC 2, ISO/IEC 42001, risk management, and privacy compliance.
• Working knowledge of TPRM, IAM, cloud security, and information security policies.
• Bachelor's degree in CS/IT/Engineering.

Responsabilités

• Conduct cybersecurity audits and gap assessments for BFSI and tech clients.
• Lead audit activities from scoping to closure and report delivery.
• Coordinate with client IT, security, and business teams.
• Test controls, collect evidence, and track remediation.
• Prepare audit reports and executive summaries.
• Conduct risk assessments and maintain risk registers.
• Perform third-party risk assessments and security due diligence.
• Review IAM, privileged access, and access reviews.
• Review cloud security, logging, encryption, and network segmentation.
• Draft and update information security policies and SOPs.
• Assist with compliance automation using Vanta, Drata, or Sprinto.
• Conduct PIAs and DPAs where applicable.

Connaissances

Client-facing

Stakeholder management

Communication

Problem solving

Attention to detail

Ownership

Multitasking

Formation

Bachelor's degree in Computer Science/IT/Engineering

ISO/IEC 27001 Lead Auditor

ISO/IEC 27001 Lead Implementer

ISO/IEC 42001 Lead Auditor

CISA

CRISC

ISC2 CC

CDPSE

Outils

Vanta

Drata

Sprinto

Description du poste

About QuassrCyberTech

QuassrCyberTech is an IT services and cybersecurity consulting and engineering company that helps organizations protect their digital infrastructure, manage cyber risks, meet regulatory requirements, and strengthen their security posture.

We are looking for a hands-on GRC Consultant with experience in cybersecurity audits, regulatory compliance, risk assessments, and client-facing consulting. The ideal candidate should be capable of independently managing audit workstreams, interacting with client stakeholders, and delivering high-quality, audit-ready documentation.

Key Responsibilities

1. Regulatory & Compliance Audits

• Conduct cybersecurity audits and gap assessments for banks, NBFCs, fintech companies, insurers, and technology organisations.
• Work on RBI cybersecurity requirements, UIDAI Aadhaar security requirements, and IRDAI cybersecurity guidelines.
• Perform ISO/IEC 27001 assessments, internal audits, and certification readiness activities.
• Support ISO/IEC 42001 AI Management System readiness and SOC 1/SOC 2 Type I and Type II engagements.
• Assist with DPDP Act 2023 and GDPR privacy assessments, where applicable.

2. Audit & Client Engagement Management

• Manage audit activities from scoping and kickoff through fieldwork, reporting, and closure.
• Coordinate with client IT, security, compliance, and business teams.
• Collect and review evidence, test controls, document findings, and track remediation.
• Prepare audit reports, executive summaries, and actionable recommendations.

3. Risk Management & Governance

• Conduct risk assessments and maintain risk registers.
• Perform third-party/vendor risk assessments and security due diligence.
• Review IAM processes, privileged access,segregation of duties, and user access reviews.
• Review cloud security configurations, logging, encryption, and network segmentation.
• Draft and update information security policies, standards, procedures, and SOPs.

4. Compliance Automation & Privacy

• Have knowledge on compliance automation of platforms such as Vanta, Drata, or Sprinto.
• Assist with control mapping, evidence automation, and continuous compliance monitoring.
• Conduct Privacy Impact Assessments (PIAs)and Data Protection Impact Assessments (DPIAs), where applicable.

Required Qualifications & Skills

• 2.5 - 3.5 years of experience in GRC, IT audit, along with cybersecurity consulting.
• Hands-on exposure to client-facing audits and compliance engagements.
• Experience with banking-sector cybersecurity audits and regulatory requirements.
• Practical exposure to RBI, UIDAI, IRDAI, and ISO/IEC 27001 assessments.
• Understanding of SOC 1/SOC 2, ISO/IEC 42001, risk management, and privacy compliance.
• Working knowledge of TPRM, IAM, cloud security, and information security policies amd cyber security concepts
• Strong documentation, analytical, communication, and stakeholder-management skills.
• Bachelor's degree in Computer Science, IT, Engineering, or a related discipline.

Preferred Certifications

• ISO/IEC 27001 Lead Auditor or Lead Implementer
• ISO/IEC 42001 Lead Auditor
• CISA, CRISC, ISC2 CC, CDPSE

Knowledge of PCI DSS, NIST CSF, SEBI CSCRF, and proficiency in English, Hindi and Marathi will be an added advantage.

What Were Looking For

• Ability to independently manage client engagements and deliverables.
• Strong ownership, attention to detail, and problem-solving skills.
• Confidence in interacting with CISOs, auditors, and business stakeholders.
• Willingness to learn evolving cybersecurity regulations and frameworks.
• Ability to manage multiple engagements and meet deadlines.

Location & Travel Requirements

• Willingness to relocate to Nashik, Maharashtra.
• Willingness to travel frequently to client locations across India.
• Flexibility to support onsite assignments and audit deadlines.

What We Offer

• End-to-end ownership of cybersecurity GRC engagements.
• Exposure to BFSI, fintech, and technology-sector clients.
• Opportunities to work on AI governance and compliance automation.
• Sponsored certifications and structured learning opportunities.
• Competitive compensation, travel allowances, and performance-linked growth.