GRC Consultant – ISO 27001 | Risk & Compliance | Travel Required

GRC Consultant – ISO 27001 | Risk & Compliance | Travel Required

Location: Kerala, Mumbai, Bengaluru, Pune, Hyderabad

Work Mode: Remote / Hybrid / Client Site, depending on project requirements

Experience: 2–4 Years

Employment Type: Full-time

About the Role

Are you an Information Security and GRC professional looking to work on real-world consulting projects?

We are looking for a GRC Consultant with hands-on experience in ISO 27001, risk assessments, gap assessments and information security compliance. You will work with clients to assess security gaps, strengthen controls, improve documentation and support compliance initiatives.

Core Responsibilities

• GRC Assessments: Conduct gap, risk, compliance and security control assessments; document findings and track remediation.
• ISO 27001 Compliance: Support implementation, maintenance, audit preparation and evidence collection.
• Risk Management: Maintain risk registers, assess information security risks and support risk treatment plans.
• Documentation & Reporting: Prepare security policies, procedures, assessment reports and compliance documentation.
• Client Coordination: Engage with client stakeholders, understand requirements and coordinate the closure of identified gaps.

What We're Looking For

Must Have

• 3–5 years of experience in GRC, Information Security, IT Risk, IT Compliance, IT Audit or a related field.
• Working knowledge of ISO 27001/27002.
• Hands-on experience in at least one area: ISO 27001 implementation, risk assessment, gap assessment, compliance assessment, security audits or control assessments.
• Understanding of information security controls, risk management and compliance documentation.
• Strong written and verbal communication skills.
• Bachelor's degree in Computer Science, IT, Engineering, Cybersecurity or a related field.

Good to Have

• ISO 27001 Lead Auditor or Lead Implementer certification.
• Knowledge of ISO 22301, ISO 31000, NIST or CIS frameworks.
• Exposure to Business Continuity, Data Privacy or IT Governance.
• CISA, CRISC, CISSP or other relevant certifications.
• Previous consulting or client-facing Information Security experience.

Important Requirements

• Candidates based in Kerala, Mumbai, Bengaluru, Pune or Hyderabad are preferred.
• Willingness to travel to client locations as required.
• Valid passport mandatory, with eligibility for international travel when projects require it.
• Personal laptop required for work-related activities.
• Flexibility to work remotely, in a hybrid setup or at client sites, depending on project requirements.

How to Apply

Interested candidates can apply through LinkedIn Easy Apply or share their updated resume at:

📧 hr@infosectrain.com

📱 WhatsApp: 8882179274

Please mention “GRC Consultant - Your Name” while sharing your resume.

Suggested LinkedIn search keywords: GRC Consultant, GRC Analyst, Information Security Consultant, ISO 27001 Consultant, Cybersecurity GRC Consultant, IT Risk Analyst, IT Compliance Analyst, IT Auditor, Risk & Compliance Consultant.