Your Role and Responsibilities:

We are seeking a highly motivated and experienced Cyber Security Consultant specializing in Governance, Risk, and Compliance (GRC), Information Security, and Cyber Risk Management. The candidate will be responsible for delivering cybersecurity consulting engagements, conducting security assessments, implementing governance frameworks, supporting regulatory compliance initiatives, and advising clients across Banking, Financial Services, Insurance (BFSI), NBFC, FinTech, and other regulated sectors.

The ideal candidate should possess strong expertise in cybersecurity governance, risk management, regulatory compliance, security frameworks, and stakeholder management.

Key Responsibilities:

Perform Cyber Security Governance, Risk, and Compliance assessments.

Develop and maintain Information Security Policies, Standards, Procedures, and Guidelines.

Establish and manage enterprise cyber risk registers.

Conduct cyber risk assessments and risk treatment planning.

Define and monitor cybersecurity KPIs, KRIs, and management dashboards.

Support implementation of Governance frameworks aligned to industry best practices.

Assess compliance against RBI Cyber Security Framework, RBI Master Directions, Digital Lending Guidelines, Outsourcing Guidelines, and applicable regulatory requirements.

Support compliance initiatives related to:

RBI Regulations

DPDPA 2023

CERT-In Directions

ISO 27001

NIST CSF 2.0

PCI DSS

SEBI / IRDAI regulations

Conduct compliance gap assessments and remediation tracking.

Maintain documentation for regulatory audits, Continuous compliance monitoring control testing





Perform Information Security Maturity Assessments.

Support ISMS implementation and certification initiatives.

Conduct policy reviews and security governance assessments.

Review security control effectiveness and compliance status.

Develop management and Board-level cybersecurity reports.

Conduct cybersecurity assessments and control reviews.

Support internal audits, external audits, and regulatory inspections.

Review vulnerability assessment and penetration testing findings.

Track audit observations and remediation activities.

Perform security posture and maturity assessments.

Frameworks Standards

Solid working knowledge of:

NIST Cybersecurity Framework (CSF 2.0), ISO/IEC 27001:2022, COBIT, CIS Controls, PCI DSS, RBI Cyber Security Framework, DPDPA 2023, CERT-In Directions

Soft Skills

Excellent communication and presentation skills

Strong report-writing and documentation skills

Stakeholder management capabilities

Analytical and problem-solving skills
Ability to independently manage consulting engagements

Required Education:

Bachelor's Degree

Preferred education

Master's Degree

Required Technical and Professional Expertise:

- 6+ years of experience in Cyber Security, Information Security, GRC, Risk Management, Compliance, or Security Consulting.
- Experience working with BFSI, NBFC, Banking, Insurance, or FinTech clients.
- Experience conducting cybersecurity assessments and regulatory compliance reviews.

Preferred Technical and Professional Experience:

Relevant certification require CISM, CISA, CISSP, ISO27001 LA/LI,

Years of Experience:
6 - 10

📌 Security Consultant - GRC (Mumbai)
🏢 IBM
📍 Mumbai