Manager - Cyber Security Consulting / GRC & Security Assessments

Protiviti India; Mumbai City, Navi Mumbai; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Protiviti India in Mumbai is seeking a Manager - Cyber Security Consulting / GRC & Security Assessments to lead cybersecurity assessment engagements. You will apply hands-on security controls knowledge across ISO, NIST CSF, and cloud/network domains while advising clients and senior leadership.

The role involves managing multiple client engagements, mentoring junior staff, and presenting findings to boards.

Qualifications

• Minimum 5 years of experience in Cyber Security Consulting, IT Risk, Information Security, GRC, or Compliance Assessments.
• Strong hands-on experience with ISO 27001/27002, ISO 27701, NIST CSF, CSA, ITGC, COBIT, COSO, and regulatory compliance assessments.
• Good understanding of Vulnerability Assessment & Penetration Testing (VAPT).
• Strong knowledge of Cloud Security, Cyber Risks, Network Security, Application Security, and Data Security.
• Experience with security technologies including IAM, Firewalls, Proxies, DLP, Endpoint Protection, and Web Filtering solutions.

Responsibilities

• Lead and execute Information Security, Cybersecurity, Privacy, and Compliance Assessments.
• Conduct Security Control Assessments, Control Validation, Control Testing, Gap Assessments, and Gap Validation activities.
• Perform reviews against industry standards and frameworks including ISO 27001/27002, ISO 27701, NIST CSF, CSA, PCI DSS, COBIT, COSO, IT General Controls (ITGC).
• Assess security controls across Cloud, Network, Infrastructure, Applications, IAM, Endpoint Security, and Data Security environments.
• Review cybersecurity governance, risk management, and compliance programs.
• Support Business Impact Assessments and Cyber Risk Assessments.
• Evaluate security controls related to IAM, Network & Infrastructure Security, Application Security, Cloud Security, DLP, Endpoint Protection, and SDLC security practices.
• Present assessment findings, risks, and remediation recommendations to Senior Management and Boards of Directors.
• Manage multiple client engagements and mentor junior team members.

Skills

Cybersecurity

GRC

Information Security

Regulatory Compliance

Leadership

Client Management

Education

Bachelor's degree in Computer Science or related field

Tools

ISO 27001/27002

NIST CSF

COBIT

COSO

ITGC

Job description

Job Title

Manager - Cyber Security Consulting / GRC & Security Assessments

Location - Mumbai - Sion (Work From Office)

Experience - 5+ Years

Shift - General Shift

Notice Period - Immediate Joiners to 30 Days

Job Summary

We are seeking an experienced Cyber Security Manager with a strong technical foundation and consulting background to lead cybersecurity assessment and assurance engagements. The ideal candidate should possess hands-on expertise across information security frameworks, cloud and network security, risk assessments, security controls evaluation, and regulatory compliance reviews. The role requires interaction with senior leadership, CXOs, and Board members while delivering practical, business-focused cybersecurity solutions.

Key Responsibilities

• Lead and execute Information Security, Cybersecurity, Privacy, and Compliance Assessments.
• Conduct Security Control Assessments, Control Validation, Control Testing, Gap Assessments, and Gap Validation activities.
• Perform reviews against industry standards and frameworks including:
  • ISO 27001/27002
  • ISO 27701
  • NIST Cyber Security Framework (CSF)
  • CSA
  • PCI DSS
  • COBIT
  • COSO 2013
  • IT General Controls (ITGC)
• Assess security controls across Cloud, Network, Infrastructure, Applications, IAM, Endpoint Security, and Data Security environments.
• Review cybersecurity governance, risk management, and compliance programs.
• Support Business Impact Assessments and Cyber Risk Assessments.
• Evaluate security controls related to:
  • Identity & Access Management (IAM)
  • Network & Infrastructure Security
  • Application Security
  • Cloud Security
  • Data Loss Prevention (DLP)
  • Endpoint Protection
  • Firewalls & Proxy Technologies
  • Secure SDLC
  • Database Security
• Present assessment findings, risks, and remediation recommendations to Senior Management and Boards of Directors.
• Manage multiple client engagements and mentor junior team members.

Required Skills & Experience

• Bachelor's Degree in Computer Science, Information Security, Information Technology, or related discipline.
• Minimum 5 years of experience in Cyber Security Consulting, IT Risk, Information Security, GRC, or Compliance Assessments.
• Strong hands-on experience with ISO 27001/27002, ISO 27701, NIST CSF, CSA, ITGC, COBIT, COSO, and regulatory compliance assessments.
• Good understanding of Vulnerability Assessment & Penetration Testing (VAPT).
• Strong knowledge of Cloud Security, Cyber Risks, Network Security, Application Security, and Data Security.
• Experience with security technologies including IAM, Firewalls, Proxies, DLP, Endpoint Protection, and Web Filtering solutions.
• Understanding of Cloud Computing, Database Management Systems, Application Controls, and SDLC security practices.
• Proven experience delivering solutions and presenting findings to executive stakeholders and Board-level audiences.
• Strong stakeholder management, leadership, communication, and consulting skills.

Preferred Certifications

• CISA
• CRISC
• CISM
• CISSP

Preferred Background

• Consulting Firms / Big 4 Consulting experience preferred.
• Strong technical cybersecurity background with exposure to Network, Infrastructure, Cloud, and Security Architecture domains.
• Experience managing client-facing cybersecurity and risk advisory engagements.