Senior Consultant - GRC L3 | Experience: 6-8 Years

Aujas Networks Pvt. Ltd.; Mumbai; On-site; INR 800,000 - 1,500,000; Full time

Job summary

A technology services firm in Mumbai is seeking an experienced information security professional. You will be responsible for conducting risk assessments, developing security policies, and providing guidance on best practices. The ideal candidate has extensive knowledge of ISO 27001 standards, experience in Third-Party Risk Assessments and cloud architecture such as AWS and Azure. Strong communication and project management skills are essential for this role.

Qualifications

• In-depth knowledge of ISO 27001 standards and information security best practices.
• Experience in conducting Third-Party Risk Assessments (TPRM).
• Experience with Cloud AWS/Azure-built environments, SaaS/PaaS/IaaS provider architecture.

Responsibilities

• Collaborate with internal stakeholders to develop and implement security policies.
• Conduct comprehensive risk assessments for IT systems, applications, and business processes.
• Prepare detailed reports outlining identified risks and proposed solutions.

Skills

ISO 27001 standards knowledge

Information security best practices

Third-Party Risk Assessments

Project management

Communication skills

Tools

AWS

Azure

GRC frameworks

Job description

Category: CAS

Job Id: 20250320

Share

• In-depth knowledge of ISO 27001 standards and information security best practices.
• Experience in conducting Third-Party Risk Assessments (TPRM).
• Collaborate with internal stakeholders to develop and implement security policies, standards, and procedures.
• Conduct comprehensive risk assessments for IT systems, applications, and business processes.
• Develop and implement effective IT risk management strategies to mitigate identified risks.
• Prepare detailed reports outlining identified risks, their potential impact, and proposed solutions.
• Experience with Cloud AWS/Azure-built environments, SaaS/PaaS/IaaS provider architecture.
• Provide expert guidance on information security best practices and regulatory requirements.
• Manage risk throughout the project lifecycle using GRC frameworks and methodologies.
• Report project status and progress to senior management on a regular basis.
• Excellent communication, documentation, and project management skills