Cyber Security Consultant - GRC

Genpact; United States; Vor Ort; USD 120.000 - 190.000; Vollzeit

Zusammenfassung

Genpact Ltd. is seeking a seasoned Manager of Cybersecurity GRC to lead governance, risk, and compliance engagements for federal and government sector clients.

You will shape evidence artifacts, control mappings, and crosswalks across CSF 2.0, NIST, and ISO standards while guiding AI governance initiatives and data privacy programs. You will collaborate with cross-functional teams to drive readiness for audits and certifications, and influence leadership with clear risk insights.

Qualifikationen

• 8-12 years of experience in Cyber Security GRC, Information Security Risk Management, Data Privacy, and Technology Audit.
• Hands-on CMMC 2.0 (Level 2) readiness experience for federal/government sector clients.
• Experience building/maintaining audit-ready evidence (SSP/POA&M) and crosswalks to ISO 27001/42001.
• Experience implementing or managing enterprise GRC platforms.
• Knowledge of risk management frameworks, Cyber Security Risk Assessments, Threat Modelling and control testing.
• Knowledge of AI governance and security, including risks in AI/ML models and data pipelines.
• Experience with data privacy programs and regulations (GDPR, CCPA, etc.).
• Ability to author/manage information security policies, standards, and procedures.

Aufgaben

• Lead cybersecurity compliance and assessment readiness activities for federal and government sector client engagements, including CMMC readiness where applicable.
• Build, maintain, and curate audit-ready evidence artifacts and documentation (SSP, POA&M, control/evidence checklists).
• Develop and maintain control definitions, mappings, and evidence requirements for consistent testing and evidence reuse.
• Create/crosswalk mappings across CMMC Level 2, NIST CSF 1.x→2.0, NIST SP 800-171, and ISO 27001/ISO 42001.
• Identify gaps and document remediation options and actions to meet applicable federal cyber requirements.
• Facilitate assessment readiness activities, including Q&A sessions and evidence walkthroughs for assessors.
• Support CSF 1.x to 2.0 transitions by producing crosswalks and defining a CSF 2.0 target profile.
• Collaborate with GRC, security, and tech stakeholders to validate scope, control applicability, and evidence availability.

Jobbeschreibung

At Genpact, we don’t just adapt to change—we drive it. AI and digital innovation are redefining industries, and we’re leading the charge. Genpact’s AI Gigafactory, our industry-first accelerator, is an example of how we’re scaling advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. From large-scale models to agentic AI, our breakthrough solutions tackle companies’ most complex challenges.

If you thrive in a fast-moving, tech-driven environment, love solving real-world problems, and want to be part of a team that’s shaping the future, this is your moment.

Genpact (NYSE: G) is an advanced technology services and solutions company that delivers lasting value for leading enterprises globally. Through our deep business knowledge, operational excellence, and cutting-edge solutions – we help companies across industries get ahead and stay ahead. Powered by curiosity, courage, and innovation, our teams implement data, technology, and AI to create tomorrow, today. Get to know us at genpact.com and on LinkedIn, X, YouTube, and Facebook.

Inviting applications for the role of Manager, Cybersecurity GRC, Cybersecurity Maturity Model (CMMC)

In this role, you will be a strategic advisor supporting federal and government sector clients and organizations serving these sectors across cybersecurity governance, risk, and compliance engagements, including Cybersecurity Maturity Model Certification (CMMC) readiness where applicable. Your focus will include GRC platform implementation, developing and managing Cyber Security and AI Governance Frameworks, and navigating the cyber regulatory landscape. You will be at the forefront of defining how organizations can securely and ethically adopt next-generation technologies.

Responsibilities

• Lead and execute cybersecurity compliance and assessment readiness activities for federal and government sector client engagements, including CMMC readiness where applicable, ensuring audit-defensible preparation and coordination for assessment/certification.
• Build, maintain, and curate audit-ready evidence artifacts and documentation (e.g., SSP, POA&M, control/evidence checklists) aligned to the in-scope environment and assessment objectives.
• Develop and maintain control definitions, mappings, and evidence requirements in a version controlled manner to support consistent control testing and evidence reuse.
• Create and maintain crosswalks/mappings across CMMC Level 2, NIST CSF (including CSF 1.x to CSF 2.0 migration needs), NIST SP 800-171, and ISO frameworks (ISO 27001/ISO 42001), to reduce duplication and improve audit efficiency.
• Identify compliance/control gaps and document remediation options, prioritization inputs, and actions needed to meet applicable federal and government sector cybersecurity requirements, including CMMC Level 2 objectives where relevant.
• Facilitate assessment readiness support activities, including stakeholder Q&A sessions and evidence walkthroughs/presentations for assessors and internal governance forums.
• Support transition activities from NIST CSF 1.x to NIST CSF 2.0 by producing crosswalks and helping define a CSF 2.0 target profile (including governance/risk outcomes relevant to the semiconductor context).
• Collaborate with GRC, security, and technology stakeholders to validate scope assumptions, control applicability, and evidence availability; drive timely reviews and approvals.

Qualifications we seek in you!

• 8-12 years of experience in Cyber Security GRC, Information Security Risk Management, Data Privacy, and Technology Audit.
• Experience supporting cybersecurity GRC engagements for federal or government sector clients or organizations serving these sectors, including hands-on CMMC 2.0 (Level 2) readiness experience and strong NIST CSF (1.x→2.0) and NIST SP 800 171 alignment skills.
• Proven ability to build/maintain audit-ready evidence (SSP/POA&M), crosswalk controls to ISO 27001/42001, and support continuous control monitoring and assessment preparation
• Proven experience implementing or managing enterprise GRC platforms.
• Expertise in developing and implementing risk management frameworks and conducting Cyber Security Risk Assessments, Threat Modelling, and control testing.
• Strong knowledge of AI governance and security, including experience assessing risks in AI/ML models and data pipelines and familiarity with frameworks like the NIST AI Risk Management Framework and OWASP Top 10 for LLMs.
• Demonstrated experience in designing and implementing data privacy programs and managing compliance with major regulations (GDPR, CCPA, etc.).
• Authored and managed the lifecycle of information security policies, standards, and procedures.
• Experience in developing and maturing Third-Party Risk Management (TPRM) programs and platforms.
• Understanding of cloud security governance and compliance management principles (e.g., Cloud Security Posture Management - CSPM).
• Excellent analytical, strategic thinking, and problem-solving skills.
• Superior communication and presentation skills, with the ability to influence senior leadership and articulate complex risk concepts to diverse audiences.
• Certifications: CCP , CCA, LCCA.
• Be a transformation leader – Work at the cutting edge of AI, automation, and digital innovation
• Make an impact – Drive change for global enterprises and solve business challenges that matter
• Accelerate your career – Get hands-on experience, mentorship, and continuous learning opportunities
• Work with the best – Join 140,000+ bold thinkers and problem-solvers who push boundaries every day
• Thrive in a values-driven culture – Our courage, curiosity, and incisiveness - built on a foundation of integrity and inclusion - allow your ideas to fuel progress

Come join the tech shapers and growth makers at Genpact and take your career in the only direction that matters: Up.

Let’s build tomorrow together.

Genpact is an Equal Opportunity Employer and considers applicants for all positions without regard to race, colour, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. Genpact is committed to creating a dynamic work environment that values respect and integrity, customer focus, and innovation.