IT GRC-Senior Associate

BDO India; Mumbai; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

BDO India is seeking a Senior Associate to join our Cybersecurity Practice in Mumbai. The role requires 3-7 years of hands-on cybersecurity consulting experience and the ability to lead end-to-end delivery on regulatory, risk, and technical security projects.

You will drive assessments aligned with ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC, and conduct cloud security reviews across AWS, Azure, and GCP. Mentoring and knowledge sharing within the team are also expected.

Qualifications

• 3-7 years in cybersecurity consulting with hands-on client delivery.
• Exposure to GRC, cloud security, and client delivery.
• Proficient in ISO 27001, RBI, SEBI, IRDAI, ITGC and ITAC frameworks.
• Hands-on experience with AWS, Azure, GCP and their security controls.
• Certifications like ISO 27001 LA, CISA, or CISM preferred.
• Exposure to VAPT or Red Teaming is an added advantage.

Responsibilities

• Lead end-to-end delivery of cybersecurity consulting projects across regulatory, risk, and technical domains.
• Drive assessments aligned with ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC frameworks.
• Conduct & lead cloud security reviews on AWS/Azure/GCP as per compliance standards.
• Engage with clients to define objectives, assess risks, and deliver tailored solutions.
• Contribute to pre-sales efforts including RFPs, scoping, and proposal development.
• Collaborate with leadership on service development, opportunity planning, and strategic initiatives.
• Maintain delivery documentation and support project operations.
• Mentor junior team members and support knowledge building within the team.

Skills

GRC

Cloud security

Client delivery

Documentation

Education

Bachelor's degree in law, Information Technology, Cybersecurity, Business, or a related field

Job description

We are looking for a for a passionate and driven Senior Associate to join our Cybersecurity Practice in Mumbai. If you have 3-7 years of hands-on experience in cybersecurity consulting and are ready to take the next step in your career, we invite you to be part of our growing team.

• Lead end-to-end delivery of cybersecurity consulting projects across regulatory, risk, and technical domains
• Drive assessments aligned with ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC frameworks
• Conduct & lead cloud security reviews on AWS/Azure/GCP as per compliance standards
• Engage with clients to define objectives, assess risks, and deliver tailored solutions
• Contribute to pre-sales efforts including RFPs, scoping, and proposal development
• Collaborate with leadership on service development, opportunity planning, and strategic initiatives
• Maintain delivery documentation and support project operations
• Mentor junior team members and support knowledge building within the team

Educational Qualifications & Experience:

• Bachelors degree in law, Information Technology, Cybersecurity, Business, or a related field.
• Privacy-related certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, or equivalent).
• 3-7 years in cybersecurity consulting with strong exposure to GRC, cloud security, and client delivery.
• Proficient in ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC frameworks
• Hands-on experience with AWS, Azure, GCP and their security controls Ability to translate client needs into actionable security solutions and delivery plans
• Experience in proposal solutioning, scoping, and cross-functional collaboration
• Strong documentation, coordination, and stakeholder management skills
• Certifications like ISO 27001 LA, CISA, or CISM preferred
• Exposure to VAPT or Red Teaming is an added advantage