Information Security Consultant – GRC

About SecMyIT Infosec Solutions: https://secmyit.com

Location: Pune

Experience: 5+ Years

Job Type: Full Time

About the Role

We are looking for an Information Security Consultant – GRC with 5+ years of experience who is comfortable working directly with clients and managing consulting engagements.

You will get an opportunity to work on real-world projects involving

• ISO 27001 & ISO 27701- Start-to-end implementation & SOC 2 Type 2 attestation
• ISMS GAP Assessment/Risk Assessments/SoA/Internal Audit/Awareness Training/ ISMS documentation
• RBI Cybersecurity Framework Assessments
• IT Audits & Internal Control Reviews
• Regulatory Compliance Assessments
• Cybersecurity Governance
• IPO Readiness Projects

What We’re Looking For

• 3+ years of IT experience
• 2+ years of hands-on ISO 27001/27701 and SOC 2 Type 2 experience
• Experience in GRC, IT Audit, Information Security or Cybersecurity Compliance
• Strong understanding of risk assessment and governance
• Practical ISO 27001 implementation experience
• RBI/BFSI cybersecurity experience is an advantage
• Strong analytical, documentation and communication skills
• Good client-handling skills
• Ability to explain technical risks in simple business terms

Qualification & Certifications Required

Bachelor's degree in computer science, IT, Information Security or a related field

Certifications are an advantage

• ISO 27001 Lead Auditor / Lead Implementer (Mandatory)/CISA/CISM/CRISC Other relevant cybersecurity/GRC certifications