Information Security Specialist - GRC

We are seeking GRC Certified Engineer in the IT services – Energy domain to ensures compliance with governance, risk, and cybersecurity regulations specific to the energy sector, including NERC CIP, ISO 27001, NIST, SOC 2, and GDPR. You will be responsible for risk assessments, security audits, and policy enforcement to protect critical infrastructure, operational technology (OT), and IT systems. You are expected to be skilled in Anaplan GRC tools, ServiceNow GRC, and Archer, they help energy companies mitigate cyber threats, manage third-party risks, and ensure regulatory adherence while maintaining business continuity.

Skills Required :

• Governance : Develop and enforce security policies, procedures, and frameworks to align with business objectives and regulatory requirements.
• Risk Management : Identify, assess, and mitigate cybersecurity risks related to IT infrastructure, applications, and data.
• Compliance Management : Ensure adherence to industry standards such as ISO 27001, NIST, GDPR, SOC 2, HIPAA, PCI-DSS by conducting audits and implementing security controls.
• Security Audits & Assessments : Perform internal security audits, gap analyses, and compliance assessments to identify vulnerabilities.
• Incident Response & Reporting : Work with security teams to manage security incidents, analyze root causes, and implement corrective actions.
• Third-Party Risk Management : Evaluate vendors and partners for compliance with security policies and contractual obligations.
• Automation & GRC Tools : Utilize tools like Archer, ServiceNow GRC, OneTrust, MetricStream to track risks, controls, and compliance metrics.
• Security Awareness & Training : Conduct security awareness programs for employees to reinforce compliance best practices.

Qualifications

Roles & Responsibilities

Experience : 4-10 yrs

Location : Hyderabad / Work From Office