- About Us

- Tsaaro Consulting's prime focus is on Data Privacy and Security

- Our team of specialist Data Privacy Consultants, Information Security Consultants, and penetration testers help and advise our Clients to make running a secure business easier with high efficiency

- Everything We do is tailored to the individual, and organisational requirements, aligned with their budget and resource challenges

- We take a pragmatic, risk-based approach to provide our clients with real-world, workable advice, guidance, and support That helps them to deal with a wide range of security and privacy-related challenges

- At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice

- By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and privacy challenges

- Looking to take your career in a new, high-impact directionTsaaro Consulting is seeking for a highly skilled and experienced GRC Analyst, this role is for those eager to transition into data privacy and information security, with hands-on experience and mentorship from industry experts

- Responsibilities

- Assist in the development, implementation, and continuous improvement of the Information Security Management System (ISMS) in accordance with ISO 27001 standards

- Monitor and ensure compliance with ISO 27001, making sure controls are in place and effectively operating across the organization

- Conduct regular assessments to ensure adherence to regulatory, contractual,



and internal security requirements

- Coordinate internal audits and provide support for external ISO 27001 audits

- Prepare documentation, assist with gathering evidence, and address findings to ensure timely closure of audit actions

- Maintain and update ISMS documentation, policies, and procedures

- Ensure that security controls, risk assessments, and audit records are accurately documented and up to date

- Support the delivery of security awareness and training programs related to ISO 27001 standards

- Foster a culture of security awareness across the organization

- Support incident response processes and prepare crisis management plans, ensuring incidents are logged, analysed, and resolved

- Participate in root cause analysis and implement corrective actions to prevent recurrence

- Collaborate with cross-functional teams to identify, assess, and prioritise security risks

- Assist in developing risk mitigation strategies and track the progress of risk treatment plans

- Proactively identify opportunities to enhance the ISMS framework, suggesting improvements to policies, processes, and tools to ensure they are efficient and effective

- Requirements





- Minimum of 2 years in Governance, Risk, and Compliance (GRC) roles, with a focus on ISMS and ISO 27001

- Bachelors degree in Information Security, Computer Science, Business Administration, or a related field (preferred)

- Excellent analytical and problem-solving skills

- Strong understanding of regulatory requirements and industry standards related to information security

- Proficiency in risk assessment methodologies and risk management practices

- Solid communication and interpersonal skills

- Ability to work effectively both independently and as part of a team

- Experience with security incident response and crisis management

- Familiarity with data protection regulations and privacy laws

- Certification in ISO 27001 Lead Auditor or Lead Implementer (preferred)

- Experience in developing and delivering security awareness training programs

- Benefits

- Competitive salary and performance-based bonuses

- Professional development opportunities, including training and certifications

- Flexible working hours

- Collaborative and inclusive work environment

- Opportunity to work with a passionate team dedicated to making a difference in data privacy and security

- check(event) ; career-website-detail-template-2 => apply(record

id,meta)" mousedown="lyte-button => check(event)" final-style="background-color:#6875E2;border-color:#6875E2;color:white;" final-class="lyte-button lyteBackgroundColorBtn lyteSuccess" lyte-rendered="">

-

📌 GRC Analyst (Mumbai)
🏢 Tsaaro Consulting
📍 Mumbai