Security Consultant - GRC

Nopal Cyber, LLC.; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

NopalCyber is seeking a compliance specialist to advance information security programs focused on ISO 27001, SOC 1, and SOC 2. You will develop and refine security policies, conduct risk assessments, and prepare audit documentation and responses for customer RFIs.

The role emphasizes collaboration to strengthen compliance posture, vendor risk assessments, and ongoing improvement across governance, risk, and compliance activities.

Qualifications

• Experience implementing ISO 27001, SOC 1 and SOC 2 compliance programs.
• Develop, review, and update security policies, procedures, and guidelines to align with compliance frameworks.

Responsibilities

• Support implementation, maintenance, and improvement of information security compliance programs (ISO 27001, SOC 1, SOC 2).
• Develop and update security policies, procedures, and guidelines.
• Conduct risk assessments and gap analyses against ISO 27001 and NIST CSF controllers.
• Prepare documentation and responses for customer RFIs and audit requests.
• Contribute to identification and mitigation of information security risks.
• Maintain documentation of security controls, compliance activities, and remediation plans.
• Prepare regular reports on compliance status and metrics.
• Perform third-party risk assessments to evaluate vendor compliance.
• Communicate and document third-party risk assessments.

Skills

ISO 27001

NIST CSF

Policy development

Risk assessment

Job description

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Managed extended detection and response (MXDR), attack surface management (ASM), breach and attack simulation (BAS), and advisory services fortify your cybersecurity across both offense and defense. AI-driven intelligence in our Nopal360° platform, our NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets anyone quantify, track, and visualize their cybersecurity posture in real-time. Our service packages, which are each tailored to a client’s needs and budget, and external threat analysis, which provides critical intelligence at no-cost, help to democratize cybersecurity by making enterprise-grade defenses and security operations available to organizations of all sizes. NopalCyber lowers the barrier to entry while raising the bar for security and service.

Job Description

Job Description:

• Support the implementation,maintenance, and continuous improvement of information security complianceprograms, specifically focusing onISO 27001, SOC 1 and SOC 2.
  
• Develop, review, and update security policies,procedures, and guidelines to align with relevant compliance frameworksand regulatory requirements.
  
• Conduct risk assessments and gap analysesagainst ISO 27001 and NIST CSF controls to identify areas forimprovement and ensure audit readiness.
  
• Prepare and compile documentation, evidence, and responsesfor customer RFIs and audit requests efficiently and accurately.
  
• Contribute in identification, assessment, and mitigation ofinformation security risks in accordance with established risk managementframeworks.
  
• Maintain comprehensive documentation of securitycontrols, compliance activities, and remediation plans.
  
• Prepare regular reports on compliance status,key metrics, and areas of concern for management and stakeholders.
  
• Perform comprehensive third-party riskassessments to evaluate vendor compliance with information securitypolicies.
  
• Ensure effective communication and documentationof third-party risk assessments.