Senior GRC consutlant - Gurgaon

Tsaaro; Gurugram District; Hybrid; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Hybrid work options

Certification sponsorship

Career growth opportunities

Job summary

Tsaaro is seeking a detailed and analytical Senior GRC Consultant to join our expanding team in Gurugram. You will leverage governance, risk, and compliance expertise to design and implement robust security frameworks and guide clients through ISO, GDPR, DPDP Act, and other regulatory requirements.

You will lead ISMS and PIMS initiatives, conduct risk assessments, gap analyses, and deliver remediation roadmaps.

Qualifications

• Bachelor's degree in information security, CS, business or a related field.
• Experience in ISMS, PIMS, audits or regulatory implementation.
• Familiarity with ISO 27001, ISO 27701, NIST, GDPR and the DPDP Act.
• Strong analytical reporting and stakeholder management.

Responsibilities

• Execute governance, risk, and compliance evaluations across regulatory frameworks and standards.
• Guide clients in deploying policies, procedures, and security controls aligned with ISO requirements (ISO 27001/27701).
• Lead risk assessments, gap analyses, and maturity evaluations of client environments.
• Develop and operationalize ISMS and PIMS and create remediation roadmaps.
• Generate audit documentation and assessment reports with actionable findings.
• Collaborate with technical and consulting teams to implement controls effectively.
• Advise clients on GDPR, DPDP Act, and other privacy/security laws.
• Conduct vendor risk evaluations and ongoing compliance monitoring.
• Maintain knowledge of evolving cybersecurity and compliance trends.

Skills

GRC expertise

Risk assessment

Audits

Regulatory compliance

Education

Bachelor's degree in Information Security/CS/Business

Tools

ISO 27001 Lead Auditor/Implementer

ISO 27701 Lead Implementer

NIST

SOC 2

GDPR

DPDP Act

Job description

Tsaaro is seeking a detail-oriented and analytical Senior GRC Consultant to join our expanding team. In this pivotal role, you will leverage your expertise in governance, risk, and compliance to help clients navigate complex regulatory landscapes with confidence. Your work will be instrumental in strengthening organizational trust by designing and implementing robust security frameworks, ensuring adherence to industry standards, and driving measurable improvements in client compliance postures.

Responsibilities

• Execute comprehensive governance, risk, and compliance evaluations across diverse regulatory frameworks and industry standards.
  
• Guide organizations in deploying policies, procedures, and security controls that align with ISO requirements, including ISO 27001 and ISO 27701.
  
• Lead risk assessment initiatives, perform gap analyses, and evaluate the maturity levels of client environments.
  
• Facilitate the development and operationalization of Information Security Management Systems (ISMS) and Privacy Information Management Systems (PIMS).
  
• Generate detailed audit documentation, assessment reports, and strategic remediation roadmaps based on identified findings.
  
• Partner with technical and consulting units to ensure the seamless integration and effectiveness of compliance controls.
  
• Advise clients on meeting specific regulatory mandates, such as the GDPR, DPDP Act, and other global privacy and security laws.
  
• Execute internal audits, vendor risk evaluations, and ongoing compliance monitoring to foster a culture of continuous improvement.
  
• Maintain current knowledge of emerging trends and evolving standards in cybersecurity, privacy, and regulatory compliance.
  

Requirements

• Possess a Bachelor's degree in Information Security, Computer Science, Business Administration, or a closely related discipline.
  
• Demonstrate prior professional experience in governance, risk, and compliance functions, specifically involving ISMS, PIMS, audits, or regulatory implementation.
  
• Exhibit a solid command of established frameworks, including ISO 27001, ISO 27701, NIST, SOC 2, GDPR, and the DPDP Act.
  
• Possess the capability to perform risk assessments, conduct gap analyses, and map controls effectively.
  
• Display strong analytical capabilities, proficient written communication for reporting, and a meticulous attention to detail.
  
• Have a proven track record of collaborating with external clients, internal stakeholders, and cross-functional teams.
  
• Demonstrate the ability to manage multiple priorities, adhere to strict deadlines, and thrive within a dynamic consulting setting.
  
• Hold relevant professional certifications, such as ISO 27001 Lead Auditor/Implementer, CIPP, or CIPM, which are considered advantageous.
  

• Work with a high-growth brand in privacy, cybersecurity, and compliance.
• Lead real-world GRC projects and deliver impactful consulting engagements.
• Collaborate with industry experts and a dynamic consulting team.
• Hybrid work options for flexibility and balance.
• Strong opportunities for professional advancement and certifications.