Cybersecurity Risk & Compliance Consultant

Job Title : GRC Consultant

Location : Mumbai

Experience : 2+ Years

Department : Information Risk Management / Cybersecurity

Employment Type : Full-time

About the Role :

We are seeking a proactive and detail-oriented GRC (Governance, Risk & Compliance) Consultant to join our Mumbai team. The ideal candidate will have hands-on experience in IT Audit, Third-Party Risk Management (TPRM), and Information Security Governance . You will assist in evaluating risks, ensuring compliance with policies and standards, and supporting clients in implementing effective risk management frameworks.

Key Responsibilities :

• Perform IT General Controls (ITGC) and Application Controls testing as part of IT audit engagements.
• Support Third-Party Risk Assessments , including vendor onboarding reviews, control assessments, and risk reporting.
• Assist in the design, implementation, and monitoring of GRC frameworks , policies, and processes.
• Conduct risk and compliance assessments aligned with frameworks such as ISO 27001, NIST, and SOC 2 .
• Prepare audit findings, risk registers, and remediation plans in collaboration with client stakeholders.
• Assist clients in meeting regulatory and compliance obligations in areas like data protection, cybersecurity, and IT governance .
• Coordinate with cross-functional teams to ensure effective risk mitigation and continuous improvement of compliance posture.

Required Skills & Qualifications :

Preferred Attributes :

Why Join Us :