Job Description
Job Description:
n
n
- n
- Hands-on experience in SOC 2 Type I and Type II implementation/readiness and delivery.n
- Robust understanding of AICPA Trust Services Criteria (TSC) .n
- Experience with control mapping, gap assessments, evidence collection and validation.n
- Understanding of Type II observation periods , control operating effectiveness and exceptions.n
- Experience coordinating with external auditors/CPA firms.n
- Ability to manage SOC 2 engagements from kickoff through audit closure .n

n2. ISO 27001 Expertise
n
- n
- Strong understanding of ISO/IEC 27001:2022 requirements.n
- Experience implementing and maintaining an Information Security Management System (ISMS) .n
- Conducting ISO 27001 gap assessments and readiness assessments.n
- Understanding of Annex A controls and applicability assessment.n
- Experience with:n
- Risk assessment and risk treatmentn
- Statement of Applicability (SoA)n
- Information security policies and proceduresn
- Internal auditsn
- Management reviewsn
- Corrective actions / NC managementn




- Continual improvementn
- ISMS metrics and monitoringn
- Experience supporting organizations through ISO 27001 certification audits .n
- Understanding of Stage 1 and Stage 2 audit processes.n

n3. Governance, Risk & Compliance (GRC)
n
- n
- Strong understanding of GRC frameworks and principles .n
- Ability to establish and maintain governance processes.n
- Experience with:n
- Risk managementn
- Control frameworksn
- Compliance assessmentsn
- Regulatory requirementsn
- Policy governancen
- Exception managementn
- Risk acceptancen
- Corrective and preventive actionsn
- Compliance monitoringn
- Ability to map controls across multiple frameworks such as SOC 2, ISO 27001, PCI DSS, GDPR, HIPAA , etc.n

n4. Compliance & Audit Management
n
- n
- Manage internal and external compliance assessments.n
- Prepare organizations for certification and attestation audits .n
- Develop audit plans

📌 Sr. Consultant (New Delhi)
🏢 TAC Security
📍 New Delhi