Opening for Cybersecurity GRC Consultant @ Mumbai

Quess IT Solutions; Mumbai; Presencial; INR 1.200.000 - 2.000.000; Jornada completa

Descripción de la vacante

Quess IT Solutions is seeking an experienced cybersecurity GRC consultant to engage with BFSI and other clients. The role involves implementing ISO/IEC 27001 controls, performing gap analyses, and delivering risk assessments and regulatory-compliance programs.

You will translate complex regulatory requirements into practical, auditable controls, support audit readiness, and contribute to policy development, documentation, and client communications.

Formación

• 5-12 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
• Demonstrated experience working directly with clients in a consulting, advisory, audit, or assurance capacity.
• Hands-on experience in ISO/IEC 27001 implementation, gap assessment, internal audit, risk assessment, control documentation, or certification-readiness engagements.
• Strong understanding of NIST cybersecurity frameworks and their practical application in assessment and improvement programs.
• Working knowledge of DPDPA, GDPR, data privacy governance, data lifecycle controls, consent management concepts, data-subject rights, and privacy risk assessments.
• Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory expectations; experience supporting BFSI clients will be preferred.
• Experience in Third-Party Risk Management, including vendor security assessments, supplier due diligence, risk classification, and remediation follow-up.
• Experience in cybersecurity posture assessments, cyber maturity assessments, cyber risk assessments, and compliance gap assessments.
• Familiarity with SOC 2 Type II requirements, Trust Services Criteria, control mapping, audit evidence, and readiness activities.
• Strong capability in developing and reviewing cybersecurity policies, standards, procedures, risk registers, control matrices, and compliance documentation.
• Experience in conducting cybersecurity training and awareness initiatives.
• Ability to interpret regulatory and framework requirements and translate them into practical, measurable, client-specific controls.
• Strong report-writing, documentation, presentation, stakeholder-management, and client communication skills.
• Ability to manage multiple concurrent engagements, meet project timelines, and work independently with limited supervision.
• Proficiency in Microsoft Word, Excel, PowerPoint, and documentation/reporting tools.

Conocimientos

Cybersecurity

GRC consulting

Regulatory compliance

Client advisory

Policy development

Risk assessment

SOC 2 readiness

ISO/27001

Documentation

Educación

CISA certification

Herramientas

Microsoft Word

Microsoft Excel

PowerPoint

Descripción del empleo

• 5-12 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
• Demonstrated experience working directly with clients in a consulting, advisory, audit, or assurance capacity.
• Hands-on experience in ISO/IEC 27001 implementation, gap assessment, internal audit, risk assessment, control documentation, or certification-readiness engagements.
• Strong understanding of NIST cybersecurity frameworks and their practical application in assessment and improvement programs.
• Working knowledge of DPDPA, GDPR, data privacy governance, data lifecycle controls, consent management concepts, data-subject rights, and privacy risk assessments.
• Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory expectations; experience supporting BFSI clients will be preferred.
• Experience in Third-Party Risk Management, including vendor security assessments, supplier due diligence, risk classification, and remediation follow-up.
• Experience in cybersecurity posture assessments, cyber maturity assessments, cyber risk assessments, and compliance gap assessments.
• Familiarity with SOC 2 Type II requirements, Trust Services Criteria, control mapping, audit evidence, and readiness activities.
• Strong capability in developing and reviewing cybersecurity policies, standards, procedures, risk registers, control matrices, and compliance documentation.
• Experience in conducting cybersecurity training and awareness initiatives.
• Ability to interpret regulatory and framework requirements and translate them into practical, measurable, client-specific controls.
• Strong report-writing, documentation, presentation, stakeholder-management, and client communication skills.
• Ability to manage multiple concurrent engagements, meet project timelines, and work independently with limited supervision.
• Proficiency in Microsoft Word, Excel, PowerPoint, and documentation/reporting tools.

Mandatory Certifications

Candidates must hold any of the following valid certifications:

• Certified Information Systems Auditor (CISA)