Information Security Consultant – GRC

SECMYIT Infosec Solutions Pvt Ltd; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

SECMYIT Infosec Solutions Pvt Ltd invites an Information Security Consultant – GRC with 5+ years of experience to lead client engagements and deliver end-to-end compliance programs. You will work on ISO 27001/27701 implementations, SOC 2 Type 2 attestations, ISMS gaps, and governance initiatives.

The role involves direct client interaction, risk assessments, regulatory readiness, and clear communication of risks in business terms. Strong documentation and audit experience are essential.

Qualifications

• Bachelor's degree in computer science, IT, information security or related field.
• 3+ years of IT experience.
• 2+ years of hands-on ISO 27001/27701 and SOC 2 Type 2 experience.
• Experience in GRC, IT Audit, information security or cybersecurity compliance.
• Strong understanding of risk assessment and governance.
• Practical ISO 27001 implementation experience.
• RBI/BFSI cybersecurity experience is an advantage.
• Strong analytical, documentation and communication skills.
• Ability to explain technical risks in simple business terms.

Responsibilities

• Manage consulting engagements with clients in GRC and security compliance.
• Perform GRC, ISMS, IT audit and security control assessments.
• Support RBI/BFSI regulatory readiness and audits.
• Develop documentation, SoA, and awareness materials.
• Explain security risks in business terms to non-technical stakeholders.
• Collaborate with clients to implement end-to-end controls and processes.

Skills

GRC

IT Audit

Information Security

Cybersecurity Compliance

ISO 27001 implementation

SOC 2 Type 2

Risk assessment

Governance

Documentation & communication

Regulatory awareness RBI/BFSI

Education

Bachelor's degree in Computer Science / IT / Information Security

Job description

Location: Pune

Experience: 5+ Years

Job Type: Full Time

About the Role:

We are looking for an Information Security Consultant – GRC with 5+ years of experience who is comfortable working directly with clients and managing consulting engagements.

You will get an opportunity to work on real-world projects involving:

• 1. ISO 27001 & ISO 27701- Start-to-end implementation & SOC 2 Type 2 attestation
• 2. ISMS GAP Assessment/Risk Assessments/SoA/Internal Audit/Awareness Training/ ISMS documentation
• 3. RBI Cybersecurity Framework Assessments
• 4. IT Audits & Internal Control Reviews
• 5. Regulatory Compliance Assessments
• 6. Cybersecurity Governance
• 7. IPO Readiness Projects

What We’re Looking For:

• 1. 3+ years of IT experience
• 2. 2+ years of hands-on ISO 27001/27701 and SOC 2 Type 2 experience
• 3. Experience in GRC, IT Audit, Information Security or Cybersecurity Compliance
• 4. Strong understanding of risk assessment and governance
• 5. Practical ISO 27001 implementation experience
• 6. RBI/BFSI cybersecurity experience is an advantage
• 7. Strong analytical, documentation and communication skills
• 9. Ability to explain technical risks in simple business terms

Qualification & Certifications Required:

Bachelor's degree in computer science, IT, Information Security or a related field

Certifications are an advantage:

• ISO 27001 Lead Auditor / Lead Implementer (Mandatory)/CISA/CISM/CRISC Other relevant cybersecurity/GRC certifications