Key Responsibilities

- Provide end-to-end support for ISO 27001:2013/ISO 27001:2022 implementation and compliance activities.

- Support Internal and External ISO 27001 Audits, including preparation of compliance documentation, audit evidence, and stakeholder coordination.

- Act as the primary liaison between auditors and client stakeholders to ensure smooth audit execution and timely closure of audit observations.

- Provide Empanelled Audit Support, ensuring end-to-end involvement throughout the audit lifecycle until successful compliance closure.

- Coordinate and support Third-Party Security Audits, including audit planning, evidence collection, stakeholder communication, and remediation tracking.

- Track audit findings, compliance gaps, and corrective actions, ensuring timely closure and reporting.

- Develop, review, and maintain Information Security Policies, Standards, Procedures, Guidelines, and SOPs.

- Perform compliance assessments and gap analysis against security frameworks and recommend remediation measures.

- Support Governance, Risk, and Compliance (GRC) initiatives aligned with business and regulatory requirements.

- Plan, coordinate, and conduct Disaster Recovery (DR) Drills, document test results, identify gaps, and monitor closure of improvement actions.





- Collaborate with business, IT, and security teams to ensure compliance with organizational security objectives.

- Prepare audit reports, compliance dashboards, management presentations, and governance metrics.

Required Skills

- Strong understanding of ISO 27001:2013/ISO 27001:2022 Information Security Management System (ISMS).

- Experience supporting Internal, External, and Third-Party Security Audits.

- Knowledge of Information Security Governance, Risk Management, and Compliance processes.

- Positive understanding of the following compliance and security frameworks:

- ISO 27001

- NIST Cybersecurity Framework

- IT General Controls (ITGC)

- Data Privacy and Data Protection regulations

- Business Continuity Management (BCM) and Disaster Recovery (DR)

- Experience in audit documentation, evidence management, compliance reporting, and issue tracking.

- Strong documentation, analytical, communication, and stakeholder management skills.

- Ability to manage multiple audits and governance activities simultaneously.

Preferred Qualifications

- ISO 27001 Lead Implementer or Lead Auditor Certification.

Pay: ₹700,000.00 - ₹800,000.00 per year

Work Location: In person

📌 GRC Consultant (Pune)
🏢 Astra Cybertech
📍 Pune