Hi,

Required Experience and Skills

- 3+ years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
- Demonstrated experience working directly with clients in a consulting, advisory, audit, or assurance capacity.
- Hands-on experience in ISO/IEC 27001 implementation, gap assessment, internal audit, risk assessment, control documentation, or certification-readiness engagements.
- Robust understanding of NIST cybersecurity frameworks and their practical application in assessment and improvement programs.
- Working knowledge of DPDPA, GDPR, data privacy governance, data lifecycle controls, consent management concepts, data-subject rights, and privacy risk assessments.
- Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory expectations; experience supporting BFSI clients will be preferred.
- Experience in Third-Party Risk Management, including vendor security assessments, supplier due diligence, risk classification, and remediation follow-up.
- Experience in cybersecurity posture assessments, cyber maturity assessments, cyber risk assessments, and compliance gap assessments.




- Familiarity with SOC 2 Type II requirements, Trust Services Criteria, control mapping, audit evidence, and readiness activities.
- Strong capability in developing and reviewing cybersecurity policies, standards, procedures, risk registers, control matrices, and compliance documentation.
- Experience in conducting cybersecurity training and awareness initiatives.
- Ability to interpret regulatory and framework requirements and translate them into practical, measurable, client-specific controls.
- Strong report-writing, documentation, presentation, stakeholder-management, and client communication skills.
- Ability to manage multiple concurrent engagements, meet project timelines, and work independently with limited supervision.
- Proficiency in Microsoft Word, Excel, PowerPoint, and documentation/reporting tools.

Mandatory Certifications

Candidates must hold the following valid certifications:

- ISO/IEC 27001:2022 Lead Auditor
- ISO 22301 Lead Auditor
- Certified Information Systems Auditor (CISA)

If interested please share resume at [email protected]

📌 Opening for Cybersecurity GRC Consultant @ Mumbai
🏢 Quess IT Staffing
📍 Mumbai