Information Security Consultant - India

Cognisys; India; Remoto; INR 1.500.000 - 1.900.000; Tempo integral

Benefícios oferecidos por esta vaga

Annual Leave: 23 days + 10 holidays

Birthday leave

Health & wellbeing plan

Training budget

Resumo da vaga

Cognisys Group is seeking an Information Security Consultant to join our GRC Consulting team. The role focuses on governance, risk and compliance work for diverse clients across regions while enabling practical security outcomes.

You will guide audits, design risk-based programs and deliver actionable recommendations, including vCISO-style advisory, to improve security maturity and alignment with business goals. Remote India-based.

Qualificações

• 2–5 years' experience in information security, cybersecurity, risk, compliance or GRC.
• Consulting or other client-facing experience.
• Practical experience with at least one framework, such as ISO 27001, SOC 2 or NIST.
• Understanding of how security controls, risk management and security operations work in practice.
• Experience supporting compliance, assurance or security improvement work for external clients.
• Confident written and verbal communication, including running sessions with clients.

Responsabilidades

• Deliver GRC engagements against frameworks such as ISO 27001, SOC 2, NIST.
• Run gap analyses, security posture assessments and maturity reviews.
• Design and implement security programmes, policies, procedures, risk registers and control frameworks.
• Guide clients through audit preparation, certification and external assessments.
• Build remediation plans and track clients' progress against them.
• Provide ongoing security advisory, including vCISO-style support.
• Assess existing security programmes and identify improvements in effectiveness and maturity.
• Help clients prioritise security initiatives by risk and objectives.
• Assess risks, controls and operating practices, and advise on remediation.
• Support specialist security projects and additional client work where your expertise adds value.
• Lead client meetings, workshops and risk assessment sessions.
• Translate security requirements into language understood by all audiences.
• Build trusted, long-term client relationships.
• Own engagements and workstreams from start to finish.
• Manage competing priorities across multiple clients.
• Raise risks and blockers early and escalate when needed.
• Produce clear, accurate deliverables to Cognisys standards.
• Share knowledge with the wider GRC team.

Conhecimentos

Information security

Risk management

GRC experience

Client-facing

Ferramentas

Vanta

Drata

OneTrust

Descrição da vaga

Location: India (Remote)

Salary: INR 1,500,000 – 1,900,000 per annum

About Cognisys

Cognisys is a cybersecurity consultancy specialising in Penetration Testing, GRC Consulting and Managed Security. We work with organisations in more than 30 countries, helping them understand their security risks, strengthen their security posture and build practical, sustainable security programmes.

The Opportunity

We are looking for an Information Security Consultant to join our GRC Consulting team and deliver across the full range of governance, risk and compliance work.

Our clients range from fast-growing companies building their first security programme to established organisations running mature ones. Some engagements are about getting a client to certification. Others are ongoing advisory: vCISO-style support, programme improvement and helping clients manage real-world risk. You will work across both.

This role needs more than framework knowledge. You will need to understand how security works in practice, apply judgement to each client's situation and explain your recommendations clearly to people at every level.

We interview every candidate for the full scope of the role. Based on your experience and strengths, we will agree with you which client portfolio you start on.

What You'll Be Doing

Compliance and certification delivery

• Deliver GRC engagements against frameworks such as ISO 27001, SOC 2, NIST and [regional frameworks].


• Run gap analyses, security posture assessments and maturity reviews.


• Design and implement security programmes, policies, procedures, risk registers and control frameworks.


• Guide clients through audit preparation, certification and external assessments.


• Build remediation plans and track clients' progress against them.

Security advisory and risk management

• Provide ongoing security advisory, including vCISO-style support.


• Assess existing security programmes and identify how to improve their effectiveness and maturity.


• Help clients prioritise security initiatives by risk, business objectives and available resources.


• Assess risks, controls and operating practices, and advise on realistic remediation.


• Support specialist security projects and additional client work where your expertise adds value.

Client and stakeholder advisory

• Lead client meetings, workshops and risk assessment sessions, usually by video call.


• Work confidently with technical teams, operational staff and senior leadership.


• Translate security and compliance requirements into language that makes sense to each audience.


• Ask good questions, challenge assumptions and explain risks and trade-offs clearly.


• Build trusted, long‑term client relationships.

Engagement ownership and quality

• Own your client engagements and workstreams from start to finish.


• Manage competing priorities across multiple clients.


• Raise risks and blockers early, and know when to involve senior colleagues.


• Produce clear, accurate deliverables to Cognisys standards.


• Use GRC platforms such as Vanta, and help shape and scope additional client work.


• Share knowledge with the wider GRC team.

About You

You’ll likely enjoy this role if you:

• Enjoy variety and can switch between different clients and types of work in a day.


• Are curious about how security really works in organisations, not just what the framework says.


• Take ownership of your work and see it through.


• Communicate clearly and confidently, in writing and in conversation.


• Are comfortable challenging constructively and telling clients what they need to hear.


• Are organised and self‑managing when working remotely.


• Want to keep learning and take on more over time.

Essential Skills & Experience

• 2–5 years' experience in information security, cybersecurity, risk, compliance or GRC.


• Consulting or other client‑facing experience.


• Practical experience with at least one framework, such as ISO 27001, SOC 2 or NIST.


• A working understanding of how security controls, risk management and security operations work in practice, not only on paper.


• Experience supporting compliance, assurance or security improvement work for external clients.


• Confident written and verbal communication, including running sessions with clients.


• Able to manage several clients and priorities in a structured way.


• Comfortable working with both technical and non‑technical stakeholders.

Desirable Skills & Experience

• Experience taking organisations through certification or external audit.


• vCISO, security advisory or ongoing security programme support.


• Experience with GRC platforms such as Vanta, Drata or OneTrust.


• Regional frameworks, e.g. NIST SP 800-53/800-171, FedRAMP or CMMC (US); Cyber Essentials or CAF (UK); POPIA (SA); DPDP Act (India]).


• Certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISMP, CISA, CISM or CISSP.

What Success Looks Like

• Deliver high‑quality client work: accurate, practical work that meets client expectations and Cognisys standards.


• Be a trusted advisor: clients value your judgement, not just your documentation.


• Think beyond compliance: you treat frameworks as one part of an effective security programme.


• Solve problems: you help clients find a realistic way forward, not just a list of gaps.


• Take ownership: you manage your engagements proactively and stay accountable for delivery.


• Communicate clearly: you explain security and compliance to technical teams and senior leaders alike.


• Keep growing: you build your technical, commercial and consulting skills and take on more over time.


• Live the Cognisys values: Together, Ownership, Momentum and Excellence.

Why Join Us?

At Cognisys, you will be part of a collaborative and innovative team that values your input and shares support. You'll have the opportunity to work on challenging projects that make a real impact for our clients. We'd love to hear from you if you want to challenge, lead and innovate! We're not just about the work; we’re about the people. Join a team where innovation is celebrated, and your contributions are valued. We foster a collaborative environment where fresh ideas thrive, and professional growth is encouraged.

What we Offer:

• Annual Leave: 23 days per year plus 10 Indian public holidays (5 national plus 5 state holidays of your choosing).


• Additional Leave: 1 day of paid leave for your Birthday.


• Health & Wellbeing: Individual healthcare insurance plan and access to an employee mental health and wellbeing platform.


• Professional Development: £2,000 annual training budget to support your continued learning and career growth.


• Referral Bonus: help to grow our team and earn up to £2,000 per successful referral.

We welcome applications from candidates from a range of diverse backgrounds and can make various reasonable adjustments to consider individual needs.