Principal Governance Risk & Compliance Analyst

Providence India; Hyderabad; On-site; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

CISM

CRISC

CISA

ISO 27001 Lead Auditor/Lead Implement.

HITRUST CCSFP

CISSP

Job summary

Providence India is seeking an experienced GRC Consultant to lead enterprise cybersecurity governance, risk management, compliance, audit, and assurance initiatives in Hyderabad. The role focuses on maturing cyber governance frameworks and advising leadership on cyber risk and compliance matters.

Requires 12–15+ years in GRC with strong stakeholder management, and expertise in ISO 27001, NIST CSF, and SOC 2 Type II. Principal Consultant level with cross-functional leadership responsibilities.

Qualifications

• 12–15+ years in cybersecurity governance, risk management, compliance, or related fields.
• Experience establishing or maturing enterprise GRC programs.
• Strong understanding of governance models, risk methodologies, and compliance frameworks.
• Experience supporting large-scale audits, certifications, and regulatory assessments.
• Experience developing policies, standards, control frameworks, and executive dashboards.
• Knowledge of ISO 27001, NIST CSF, HITRUST CSF, SOC 2 Type II, HIPAA, and other frameworks.
• Proven ability to influence and engage senior stakeholders.
• Strong consulting, leadership, communication, and stakeholder management skills.
• Experience managing cross-functional compliance and assurance initiatives.

Responsibilities

• Lead enterprise GRC programs across governance, risk management, compliance, and assurance.
• Develop and maintain cybersecurity policies, standards, procedures, and control frameworks.
• Conduct enterprise risk assessments and risk analysis.
• Drive implementation and continuous improvement of governance controls.
• Support audits, regulatory assessments, and certification initiatives.
• Establish risk and compliance reporting for executives and stakeholders.
• Monitor compliance with regulations, contractual obligations, and security standards.
• Collaborate with technology, security, legal, privacy, and business teams.
• Facilitate control testing, gap assessments, remediation tracking, and reviews.
• Provide guidance on cyber risk posture and regulatory obligations.
• Lead third-party risk management and vendor due diligence.
• Mentor teams and promote a governance culture.

Skills

GRC programs

Cybersecurity governance

Risk management

Compliance

Audit & assurance

Regulatory frameworks

Stakeholder management

Policy development

Leadership

Vendor risk

Job description

GRC Consultant – Cyber Governance, Risk & Compliance

Location: Hyderabad, India | Experience: 12–15+ Years | Role Level: Principal Consultant / GRC Consultant

Role Summary

We are seeking an experienced Governance, Risk & Compliance (GRC) Consultant to lead enterprise cybersecurity governance, risk management, compliance, audit, and assurance initiatives. The role will drive the development and maturity of cyber governance frameworks, strengthen risk management practices, support regulatory and certification requirements, and provide strategic guidance to leadership on cyber risk and compliance matters.

Job Description

GRC Consultant – Cyber Governance, Risk & Compliance

Location: Hyderabad, India | Experience: 12–15+ Years | Role Level: Principal Consultant / GRC Consultant

Role Summary

We are seeking an experienced Governance, Risk & Compliance (GRC) Consultant to lead enterprise cybersecurity governance, risk management, compliance, audit, and assurance initiatives. The role will drive the development and maturity of cyber governance frameworks, strengthen risk management practices, support regulatory and certification requirements, and provide strategic guidance to leadership on cyber risk and compliance matters.

Key Responsibilities

• Lead enterprise Cyber Governance, Risk Management, Compliance, and Assurance programs.
• Develop and maintain cybersecurity policies, standards, procedures, and control frameworks.
• Conduct enterprise risk assessments, cyber risk analysis, and risk treatment planning.
• Drive implementation and continuous improvement of governance and control frameworks.
• Support internal and external audits, regulatory assessments, and certification initiatives.
• Establish risk and compliance reporting mechanisms for executive leadership and key stakeholders.
• Monitor compliance with industry regulations, contractual obligations, and security standards.
• Partner with technology, security, legal, privacy, and business teams to address risk and compliance requirements.
• Facilitate control testing, gap assessments, remediation tracking, and compliance reviews.
• Provide strategic guidance on cyber risk posture, governance priorities, and regulatory obligations.
• Lead third-party risk management, vendor assessments, and security due diligence activities.
• Mentor teams and promote a strong culture of governance, accountability, and risk awareness.

Required Qualifications

• 12–15+ years of experience in Cybersecurity Governance, Risk Management, Compliance, Audit, or related disciplines.
• Experience establishing, managing, or maturing enterprise GRC programs.
• Strong understanding of cybersecurity governance models, risk management methodologies, and compliance frameworks.
• Demonstrated experience supporting large-scale audits, certifications, and regulatory assessments.
• Experience developing policies, standards, control frameworks, and executive reporting dashboards.
• Strong knowledge of ISO 27001, NIST CSF, HITRUST CSF, SOC 2 Type II, HIPAA, and other industry frameworks.
• Experience conducting risk assessments, compliance reviews, and control effectiveness evaluations.
• Proven ability to influence and engage senior business and technology stakeholders.
• Strong consulting, leadership, communication, and stakeholder management skills.
• Experience managing cross-functional compliance and assurance initiatives.

Preferred Certifications

CISM, CRISC, CISA, ISO 27001 Lead Auditor / Lead Implementer, HITRUST CCSFP preferred, and CISSP preferred.

Key Competencies

Cyber Governance & Policy Management, Enterprise Risk Management, Regulatory Compliance & Audit Management, Security Control Frameworks, Third-Party Risk Management, Executive Reporting & Metrics, Assurance & Control Testing, Stakeholder Management & Consulting, Strategic Planning & Leadership, and Risk-Based Decision Making.