Senior GRC Consultant

CyberSRC Consultancy Pvt. Ltd.; Chennai District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

CyberSRC Consultancy Pvt. Ltd. in India seeks an experienced Senior GRC Consultant to lead end-to-end governance, risk, and compliance initiatives across clients. You will drive regulatory adherence, implement security frameworks, and develop governance documents.

The role requires strong analytical skills, stakeholder management, and hands-on experience with ISO 27001, SOC 2, GDPR, and other standards. You will mentor juniors and coordinate with cross-functional teams.

Qualifications

• 4–7 years of experience in GRC, Information Security, Audit, or Compliance.
• Strong knowledge of ISO standards, SOC 2, NIST frameworks, DPDPA, and global data protection laws.
• Experience with risk management tools or GRC platforms (Archer, ServiceNow GRC, OneTrust, etc.).
• Excellent documentation, communication, and analytical skills.
• Ability to work independently and manage multiple projects simultaneously.
• Certifications preferred: ISO 27001 LA/LI, CISA, CISM, CRISC, CIPM/CIPP/E, etc.

Responsibilities

• Lead and manage GRC assessments, audits, and compliance programs.
• Implement and maintain frameworks such as ISO 27001, ISO 27701, SOC 2, GDPR, HIPAA, PCI-DSS, and internal policies.
• Conduct risk assessments, gap analysis, and prepare risk treatment plans.
• Develop and update security policies, SOPs, and governance documents.
• Work with cross-functional teams to ensure compliance alignment.
• Prepare and present detailed audit reports, dashboards, and remediation plans.
• Manage client interactions, project timelines, and deliverables.
• Monitor regulatory changes and advise leadership on implications.
• Support incident management, business continuity, and vendor risk programs.
• Mentor junior team members on GRC processes and best practices.

Skills

GRC

Information Security

Audit

Compliance

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Archer

ServiceNow GRC

OneTrust

NIST frameworks

Job description

Join our mission to secure the digital world.

Full-time

2-4 Year(s)

Job Overview

We are seeking an experienced Senior GRC Consultant who will be responsible for leading endto-end governance, risk, and compliance initiatives, ensuring organizational adherence to regulatory requirements, security frameworks, and internal controls. This role requires strong analytical ability, stakeholder management, and hands‑on experience with industry standards.

Key Responsibilities

• Lead and manage GRC assessments, audits, and compliance programs.
• Implement and maintain frameworks such as ISO 27001, ISO 27701, SOC 2, GDPR, HIPAA, PCI‑DSS, and internal policies.
• Conduct risk assessments, gap analysis, and prepare risk treatment plans.
• Develop and update security policies, SOPs, and governance documents.
• Work with cross-functional teams to ensure compliance alignment.
• Prepare and present detailed audit reports, dashboards, and remediation plans.
• Manage client interactions, project timelines, and deliverables.
• Monitor regulatory changes and advise leadership on implications.
• Support incident management, business continuity, and vendor risk programs.
• Mentor junior team members on GRC processes and best practices.

Requirements

• 4–7 years of experience in GRC, Information Security, Audit, or Compliance.
• Strong knowledge of ISO standards, SOC 2, NIST frameworks, DPDPA, and global data protection laws.
• Experience with risk management tools or GRC platforms (Archer, ServiceNow GRC, OneTrust, etc.).
• Excellent documentation, communication, and analytical skills.
• Ability to work independently and manage multiple projects simultaneously.
• Certifications preferred: ISO 27001 LA/LI, CISA, CISM, CRISC, CIPM/CIPP/E, etc.

Preferred Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
• Relevant certifications (preferred).

Why Join CyberSRC?

Join a team of elite cybersecurity professionals dedicated to protecting the digital world. AtCyberSRC, you'll work on cutting-edge projects, collaborate with industry experts, and make a realimpact in the fight against cyber threats. We offer unparalleled growth opportunities and the chanceto shape the future of cybersecurity.

Work with Experts

Collaborate with industry-leading cybersecurity professionals and learn from the best.

Accelerate your career with continuous learning and advancement opportunities.

Global Exposure

Work with clients worldwide and gain exposure to diverse security challenges.

Work on cutting-edge cybersecurity projects using the latest technologies.