Hiring a Senior Cybersecurity GRC Consultant, you will play a pivotal role in helping organizations manage and improve their Governance, Risk, and Compliance (GRC) frameworks. You will be responsible for setting up and leading assessments, implementing strategies, and advising clients on how to mitigate cybersecurity risks and achieve compliance with industry standards and regulatory requirements.
8+ Years of Experience in cybersecurity, risk management, and governance, with a proven track record of leading GRC initiatives.
Educational Background: Bachelors or Masters degree in Information Technology, Cybersecurity, Computer Science, Business Administration, or a related field.
Certifications: Relevant cybersecurity certifications such as CISSP, CISA, CISM, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, or similar.
Must have experience in customer facing projects (onsite / offsite); Should be able to lead the junior team members.
In-depth Knowledge of Cybersecurity Frameworks: Expertise in implementing and advising on security frameworks such as Unified Cybersecurity Framework, NIST/RBI/IRDAI/SEBI Cybersecurity Frameworks, ISO 27001/2, CIS Controls etc.
Project Management: Proven ability to manage and lead multiple GRC projects simultaneously, with strong organizational and time-management skills.
Client-Focused: Demonstrated ability to build and maintain relationships with clients, providing expert advice and ensuring customer satisfaction.
Cloud Security: Knowledge of cloud environments (AWS, Azure, Google Cloud) and their associated risks and compliance requirements.
Penetration Testing & Vulnerability Management: Familiarity with vulnerability assessment, penetration testing, and ethical hacking practices.
Incident Management: Experience in developing or improving incident response plans, business continuity plans, and disaster recovery strategies.
Keyskills: Cybersecurity GRC Third party risk audit Third Party Risk Assessment Risk Management and Assessment Cloud Security Security Framework Implementation IRDAI CISA GRC Frameworks NIST Cyber Security ISO 27001 Lead Implementer CISSP GRC ISO 27001 Lead Auditor CISM