Company Name: VARITE India Private Limited

About The Client:

A global professional services network and part of the Big Four, along with Client, EY, and KPMG, operating across 149 countries worldwide. About The Job:

- We are looking for a Governance, Risk & Compliance (GRC) professional with hands-on experience in information security, risk management, compliance, and audit processes.
- The ideal candidate should possess strong knowledge of governance frameworks, cybersecurity controls, risk assessment methodologies, and compliance requirements while working effectively with cross-functional stakeholders.

Essential Job Functions:

- Conduct internal assessments, risk assessments and review of IT and OT processes and recommend actions for improving IT governance maturity using reference frameworks like ISO 27001, NIST Framework, and TISAX.
- Ensure compliance with organizational Information Security policies and procedures.
- Perform regular checks and KRIs on security tools.
- Be responsible for monitoring and managing security-related nonconformities.
- Conduct risk assessments to identify, evaluate, and prioritize risks related to information security and business operations.
- Support external audits by preparing documentation, coordinating audit activities, and ensuring compliance with cybersecurity policies and standards.
- Work closely with IT, Legal, and other business stakeholders to integrate Information Security risk management into business processes, ensuring alignment with organizational goals.
- Contribute to the development of Information Security policies, procedures, and guidelines.
- Assist in delivering training programs to raise awareness of security best practices across the organization.
- Maintain clear and comprehensive documentation of risk assessments, compliance activities, audits,



and incident reports to provide transparency to senior leadership and regulatory bodies.

Qualifications:

Required Experience

- Minimum 2+ years of hands-on experience in Governance, Risk and Compliance (GRC) roles.
- Good understanding of Information Security principles, controls, risk management methodologies, compliance, and audit.

Mandatory Skills
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal skills.
- Ability to influence and work collaboratively across departments.
- Proficiency in GRC tools and software.

Preferred Knowledge
- ISO 27001 Framework.
- NIST Cybersecurity Framework.
- TISAX.
- Information Security Governance.
- IT/OT Risk Management.
- Audit & Compliance Management.
- Security Controls Assessment.
- Cybersecurity Risk Analysis.

How to Apply: Interested candidates are encouraged to respond/submit their updated resumes, and for additional job opportunities, please visit Jobs In India – VARITE.

Unlock Rewards: Refer Candidates and Earn.

If you're not available or interested in this opportunity, please pass this along to anyone in your network who might be a good fit and interested in our open positions.

Experience Level Bonus Referral:

Experience Level Referral Bonus 0 - 2 Years INR 5,000 2 - 6 Years INR 7,500 6+ Years INR 10,000 About VARITE: VARITE is a global staffing and IT consulting company providing technical consulting and team augmentation services to Fortune 500 Companies in USA, UK, CANADA and INDIA.

Equal Opportunity Employer:

VARITE is an equal chance employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, veteran status, or disability status.

📌 Associate (Mumbai)
🏢 VARITE
📍 Mumbai