Role description

Cyber Risk Management Engagement Type Full time Experience Level 2-4 Years Function Governance Risk, & Compliance ABOUT THE ROLE We are looking for a detail-oriented and proactive Client Assurance Contractor to support our team on an as-needed basis. In this role, you will be part of the first line of response for all client-facing security and compliance requests, ensuring our clients and business stakeholders receive timely, accurate, and professionally presented assurance materials. You will work closely with our legal, case, and client service teams to respond to security questionnaires and review contractual security clauses — playing a critical role in building and maintaining client trust across our consulting engagements. KEY RESPONSIBILITIES Security Questionnaire Management Review and respond to client security questionnaires (RFPs, DDQs, vendor assessments) received from clients across all engagement stages. Maintain and continuously update a centralized knowledge base of standard responses, ensuring answers reflect current firm policies and certifications. Coordinate with internal stakeholders (IT, InfoSec, HR, Legal) to gather accurate inputs for complex or bespoke questionnaire items. Track all incoming questionnaire requests, manage turnaround timelines, and ensure SLAs are consistently met. Contract Security Clause Review Collaborate with the legal and case teams to review, flag, and advise on security-related clauses in client contracts and engagement letters. Identify gaps or risks in proposed contractual language and recommend appropriate redlines or standard firm positions. Maintain a repository of pre-approved security clause positions and standard firm language for common scenarios. Escalate high-risk or non-standard contractual requirements to senior leadership or the InfoSec team as needed.



Client Assurance & Reporting Prepare client-facing assurance documentation (e.g., security summaries, data handling statements, certification overviews). Support the team in responding to ad-hoc client queries related to data privacy, information security, and regulatory compliance. Monitor and track the status of pending client assurance requests across multiple simultaneous engagements. REQUIRED QUALIFICATIONS 2–4 years of experience in information security, risk & compliance, legal operations, client assurance, or a related field. Experience working in a professional services, consulting, or other client-facing services environment is preferred. Familiarity with common security frameworks and standards (e.g., ISO 27001, SOC 2, GDPR, NIST). Experience handling or contributing to security questionnaires or vendor due diligence responses. Strong written communication skills with the ability to translate technical security concepts into clear, client-friendly language. High attention to detail and ability to manage multiple concurrent requests with varying deadlines. Comfortable working independently in a fast-paced, client-focused environment. KEY COMPETENCIES ✔ Analytical Thinking ✔ Attention to Detail ✔ Clear Written Communication ✔ Stakeholder Collaboration ✔ Time & Priority Management ✔ Discretion & Confidentiality

Skills

GRC, Risk Management, Compliance Management

About UST
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.

📌 Cyber Risk Management (GRC) (India)
🏢 UST
📍 India