Job Summary
We are looking for a Cyber Security GRC professional to support governance, risk management, and compliance initiatives across the organization. The role focuses on developing security policies, managing risk assessments, ensuring regulatory compliance, and supporting audits to strengthen the organization’s security posture.

Key Responsibilities
- Develop, review, and maintain information security policies, standards, and procedures
- Conduct risk assessments and gap analyses against security frameworks
- Support compliance with standards and regulations such as ISO 27001, NIST, SOC 2, GDPR, etc.
- Coordinate internal and external security audits and track remediation actions
- Maintain risk registers and track risk treatment plans
- Work with technical teams to translate security requirements into controls
- Support third-party/vendor risk assessments
- Monitor compliance metrics and prepare management reports




- Assist in incident response governance and post-incident reviews

Qualifications
- Bachelor’s degree in Information Security, IT, Computer Science, or related field
- 2-6 years of experience in Cyber Security GRC or IT risk/compliance
- Solid understanding of security frameworks and regulatory requirements
- Experience with audits, risk assessments, and compliance reporting
- Certifications such as ISO 27001 LA/LI, CISA, CRISC, CISSP (preferred)

Skills & Competencies
- Risk analysis and documentation skills
- Strong written and verbal communication
- Stakeholder management and coordination
- Attention to detail and structured thinking
- Ability to work with both technical and non-technical teams

Job Types: Full-time, Permanent

Pay: ₹25,000.00 - ₹45,000.00 per month

Benefits:
- Provident Fund

Work Location: In person

📌 Cyber Security (Nashik)
🏢 Aavesh Enterprises
📍 Nashik