Location : Bhandup, Mumbai
Experience : 1-8 years
Industry : Cybersecurity, IT Security, IT Audit
Employment Type : Full-time
Role Overview :
We are seeking Governance, Risk, and Compliance (GRC) professionals to join our team as GRC Executive / GRC Manager. The role involves risk assessment, regulatory compliance, and security audits to strengthen organizational security posture.
The ideal candidate will have hands-on experience with ISO 27001, SOC 2, NIST, and other regulatory frameworks and strong analytical and communication skills to drive compliance initiatives.
Key Responsibilities
- Conduct risk assessments, internal audits, and gap analysis based on ISO 27001, SOC 2, GDPR, and NIST
- Assist in compliance audits, policy documentation, and regulatory reporting.
- Identify security risks, vulnerabilities, and control gaps, providing risk mitigation strategies.
- Plan and execute internal / external audits, and develop compliance roadmaps
- Support third-party / vendor security assessments and ensure adherence to security standards
- Draft and maintain Information Security Policies, Data Privacy Policies, and Risk Management Frameworks
- Assist in designing Business Continuity Plans (BCP) and Disaster Recovery (DR) strategies
- Prepare and submit compliance reports, audit findings, and risk assessments
- Assist in regulatory filings for ISO 27001, GDPR, and other security frameworks
- Collaborate with internal teams, clients, and regulators for compliance updates
Required Skills & Qualifications :
1-8 years of experience in GRC, cybersecurity, IT risk management, or complianceExperience in implementing and leading GRC projects and auditsCertification in ISO 27001 Lead Auditor / Internal Auditor, CISA (mandatory)Strong knowledge of ISO 27001, GDPR, SOC 2, NIST, ITGC, and Data Privacy LawsExperience in IT audits, internal audits, risk assessments, and compliance reportingProficiency in risk assessment tools, security frameworks, and compliance checklistsExcellent analytical, problem-solving, and communication skillsAbility to work independently and collaborate with cross-functional teamsStrong client handling, regulatory engagement, and stakeholder management skillsExperience in implementing Governance, Risk & Compliance frameworks