IT GRC - Senior Associate

BDO India; Mumbai; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

BDO India is seeking a Senior Associate to join the Cybersecurity Practice in Mumbai. The ideal candidate has 3-7 years of hands-on cybersecurity consulting experience and is ready to advance their career within a growing team.

Responsibilities include leading end-to-end delivery, performing cloud security reviews across AWS/Azure/GCP, engaging with clients, contributing to pre-sales, and mentoring junior staff. A strong emphasis on regulatory and framework compliance is expected.

Qualifications

• Bachelor's degree in law, Information Technology, Cybersecurity, Business, or related field.
• Privacy-related certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, or equivalent).
• 3-7 years in cybersecurity consulting with strong exposure to GRC, cloud security, and client delivery.

Responsibilities

• Lead end-to-end delivery of cybersecurity consulting projects across regulatory, risk, and technical domains.
• Drive assessments aligned with ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC frameworks.
• Conduct & lead cloud security reviews on AWS/Azure/GCP as per compliance standards.
• Engage with clients to define objectives, assess risks, and deliver tailored solutions.
• Contribute to pre-sales efforts including RFPs, scoping, and proposal development.
• Collaborate with leadership on service development, opportunity planning, and strategic initiatives.
• Maintain delivery documentation and support project operations.
• Mentor junior team members and support knowledge building within the team.

Skills

ISO 27001

RBI

SEBI

IRDAI

ITGC

ITAC

AWS security

Azure security

GCP security

Documentation

Stakeholder mgmt

Education

Privacy-related certifications (CIPP/E, CIPP/US, CIPM, CIPT)

ISO 27001 LA

CISA

CISM

Job description

Job Summary:

We are looking for a for a passionate and driven Senior Associate to join our Cybersecurity Practice in Mumbai. If you have 3-7 years of hands‑on experience in cybersecurity consulting and are ready to take the next step in your career, we invite you to be part of our growing team.

Roles & Responsibilities:

• Lead end-to-end delivery of cybersecurity consulting projects across regulatory, risk, and technical domains
• Drive assessments aligned with ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC frameworks
• Conduct & lead cloud security reviews on AWS/Azure/GCP as per compliance standards
• Engage with clients to define objectives, assess risks, and deliver tailored solutions
• Contribute to pre-sales efforts including RFPs, scoping, and proposal development
• Collaborate with leadership on service development, opportunity planning, and strategic initiatives
• Maintain delivery documentation and support project operations
• Mentor junior team members and support knowledge building within the team

Educational Qualifications & Experience:

• Bachelors degree in law, Information Technology, Cybersecurity, Business, or a related field.
• Privacy-related certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, or equivalent).
• 3-7 years in cybersecurity consulting with strong exposure to GRC, cloud security, and client delivery.

Skills & Competencies:

• Proficient in ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC frameworks
• Hands-on experience with AWS, Azure, GCP and their security controls Ability to translate client needs into actionable security solutions and delivery plans
• Experience in proposal solutioning, scoping, and cross-functional collaboration
• Strong documentation, coordination, and stakeholder management skills
• Certifications like ISO 27001 LA, CISA, or CISM preferred
• Exposure to VAPT or Red Teaming is an added advantage

Behavioural Attributes:

High level of confidentiality and discretion.

Ability to perform under pressure and manage multiple competing priorities.

Customer-service-oriented with a positive attitude.

Strong problem-solving skills and ability to work collaboratively in a team.