Company Description Offset Security is a specialized security partner that operates as an integrated internal security department for its clients, replacing fragmented vendor models with a cohesive architecture, response, and GRC function. The company sits between day-to-day operations and evolving risks, providing both hands-on technical engineering and senior advisory services to reduce vulnerabilities, protect endpoints, and actively manage risk.

Offset

Security focuses on accelerating and sustaining compliance with key frameworks such as ISO 27001, SOC 1 & 2, GDPR, and the DPDP Act. Its practice areas include executive security advisory (vCISO), compliance acceleration, continuous vulnerability management, endpoint protection and risk governance, and infrastructure patch optimization, all aimed at securing business growth rather than just monitoring threats.

Role Description The GRC Lead Implementor is a full-time, Hybrid role responsible for designing, implementing, and maintaining governance, risk, and compliance programs across multiple client environments. This role leads end-to-end implementation of frameworks such as ISO 27001, SOC 1 & 2, GDPR, and the DPDP Act, including gap assessments, control mapping, policy development, and evidence collection.

The GRC Lead Implementor collaborates closely with client stakeholders, security engineers, and executive advisors to translate business needs into practical controls, streamline audit readiness, and continuously improve the control environment. Day-to-day activities include documenting processes, guiding remediation of findings,



tracking risk treatment plans, preparing compliance reports, and contributing to security architecture and response initiatives as needed.

Education : Graduate in any discipline.

Experience : Minimum 2-3 years of proven experience specifically as an ISO Lead Implementer

Qualifications

.

- Strong expertise in GRC implementation, including risk assessment, control design, policy and procedure development, and compliance program management.
- Hands-on experience with security and privacy frameworks such as ISO 27001, SOC 1 & 2, GDPR, DPDP Act, or similar standards.
- Solid understanding of information security principles, vulnerability management, endpoint protection, and secure infrastructure practices.
- Proficiency in documenting processes, creating audit-ready evidence, and preparing reports and presentations for technical and non-technical stakeholders.
- Ability to work remotely with clients, manage multiple projects, prioritize tasks, and meet deadlines in a fast-paced environment.
- Strong communication, stakeholder management, and advisory skills, with the ability to translate complex security requirements into transparent, actionable guidance.
- Experience collaborating with vCISO or security leadership functions, and participating in or leading external audits is beneficial.
- Bachelor’s degree in information security, computer science, law, business, or a related field, or equivalent practical experience; relevant certifications (e.g., ISO 27001 Lead Implementer/Auditor, CISA, CISSP, CISM) are an advantage.

📌 GRC Lead Implementor (India)
🏢 Offset Security
📍 India