Key Responsibilities

1. ISO27001 Implementation and Management

- Develop and implement an Information Security Management System (ISMS) as per ISO27001:2022 standards.

- Conduct regular gap assessments, risk mapping and evaluations, and maintain ISMS documentation.

- Drive the ISO27001 certification process and manage ongoing compliance.

2.

Internal

Audits and Risk Assessments

- Plan, execute, and document internal security audits to ensure adherence to organisational policies and regulatory standards.

- Identify gaps, recommend corrective actions, and monitor their implementation.

- Conduct periodic risk assessments to mitigate emerging threats.

3.

Regulatory

Compliance

- Ensure full compliance with RBI and SEBI cybersecurity guidelines, including IT governance, resilience, and data protection requirements.

- Stay updated on regulatory changes and advise the organization on necessary adjustments.

- Oversee the preparation and submission of compliance reports to regulatory bodies.

4. Cybersecurity and Resilience

- Develop and implement strategies to enhance the organization's cybersecurity posture and operational resilience.

- Monitor and enforce security controls such as access management, data encryption, and incident response readiness.

- Collaborate with IT teams to ensure secure infrastructure and application development practices.

5.

Policy

Development and Awareness

- Draft and update cybersecurity and IT compliance policies to align with ISO27001, RBI, SEBI, and other standards.

- Conduct training and awareness programs for employees to foster a security first culture.

6.

Incident

Management

- Lead the development and testing of incident response plans, ensuring quick and effective handling of security events.

- Provide insights and corrective measures post-incident, enhancing future resilience.

7.



Vendor and Third-Party Risk Management

- Evaluate third-party vendors and service providers for compliance with security and regulatory standards.

- Develop frameworks for monitoring vendor performance and adherence to contracts.

8.

Continuous

Improvement

- Identify opportunities for improving IT governance, data protection, and compliance frameworks.

- Leverage technology and automation to streamline security and compliance processes.

Requirements

- Strong understanding of RBI, SEBI, and other Indian regulatory frameworks.

- Expertise in internal audits and risk management.

- Excellent communication and presentation skills, stakeholder management, and problem solving skills.

- Familiarity with tools and frameworks related to vulnerability management, SIEM, and compliance monitoring.

Qualification :

- Education: Bachelor's degree in IT, Computer Science, or a related field.

- Certifications: ISO27001 Lead Auditor Preferred

- Experience: Proven experience in information security, regulatory compliance, and implementing ISO27001 standards.

Pay: ₹300,000.00 - ₹400,000.00 per year

Advantages

- Health insurance

- Paid sick time

- Provident Fund

- Work from home

Application Question(s)

- How many years of experience do you have in GRC/Information Security?

- Do you have hands-on experience with ISO 27001:2022?

- Have you worked on ISMS implementation?

- Do you have experience with RBI and SEBI cybersecurity guidelines?

- Have you performed third-party/vendor risk assessments?

- Do you hold any relevant certifications, such as ISO 27001 Lead Auditor? Please mention them.

- Which GRC frameworks, standards, or security compliance tools have you worked with?

- Are you comfortable working from Mumbai?

- What is your current CTC ?

- What is your expected CTC?

- What is your notice period?

Work Location: In person

📌 GRC Consultant (Mumbai)
🏢 CyberNX Technologies
📍 Mumbai