SN Required Information Details 1 Role GRC Analyst / Consultant 2 Required Technical Skill Set Experience in cybersecurity risk assessment, Control testing and Compliance audits 3 No of Requirements - 4 Desired Experience Range 4+years 5 Location of Requirement Any location across India (Prefered Mumbai, Chennai, Delhi, Bangalore or Hyderabad) Desired Competencies (Technical/Behavioral Competency) Must-Have Technical: • Security Framework Alignment and Related Controls Testing (NIST, CoBIT, ISO 27001) • SOX Testing for IT Controls • IT Compliance audits • Vendor Risk Assessments • Contribute to documentation of Information Security Policies, Standards, Processes, and Procedures. • Manage and perform cybersecurity assessments on emerging/ongoing business initiatives, third-party services • Evaluate third-party products/services by reviewing standardized questionnaires, evidencing their controls Non-Technical: • Analytical thinker • Collaborative team player • Eexcellent written and verbal communication • Capable of bridging the gap between business demands and cybersecurity requirements • Ability to articulate cybersecurity risks in business terms • Demonstrable knowledge of information security standards, data security practices and procedures • Understanding of the impact of various data protection and integrity controls, operating systems and network security controls, authentication controls,



and security protocols • Requires demonstrable knowledge of security principles to a diverse range of risk scenarios to coordinate acceptable solutions between business needs, technology operations, and information security best practices Good-to-Have • Familiarity with GRC Tools (RSA Archer, ServiceNow GRC) • Certifications like CISA, CISSP, CISM, CRISC etc. SN Responsibility of / Expectations from the Role 1 Conduct risk assessments, Control testing & vendor Risk Assessments 2 Documentation and reporting of findings 3 Provide regular updates and reports to the customer 4 Type Details of The Role (For Candidate Briefing) Reporting To Which Role Sr. GRC Analyst Consultant Size of the Team, if any Reporting to this Role No (will be a team member) On-site Prospect Carry out customer IT risk analysis in identifying, classifying, and collaboratively mitigating cyber risk enterprise-wide. Unique Selling Proposition (USP) of The Role Ability to articulate cybersecurity risks in business terms Details of The Project (A short Briefing on the Project may be attached with this document for candidate- briefing). It may be shared with external stakeholders like job-agencies etc. The Risk & Compliance team of customer provides actionable and intelligent cyber risk decision support. Customer has multiple T&M; positions for GRC Analysts / Consultants for the Risk & Compliance team to perform risk analysis, control testing, compliance audits etc. All positions can be staffed across any location in In

📌 GRC (TPRM & Archer) Face To Face interview For 1st August (Maharashtra)
🏢 Tata Consultancy Services
📍 Maharashtra