Job DescriptionHi,

NRequired Experience and Skills

N

n
- 3+ years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
N
- Demonstrated experienceworking directly with clients in a consulting, advisory, audit, or assurance capacity.
N
- Hands-on experience in ISO/IEC 27001 implementation, gap assessment, internal audit, risk assessment, control documentation, or certification-readiness engagements.
N
- Solid understanding ofNIST cybersecurity frameworks and their practical application in assessment and improvement programs.
N
- Working knowledge of DPDPA, GDPR, data privacy governance, data lifecycle controls, consent management concepts, data-subject rights, and privacy risk assessments.
N
- Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory expectations;

experience supporting BFSI clients will be preferred.

N
- Experience in Third-Party Risk Management, including vendor security assessments, supplier due diligence, risk classification, and remediation follow-up.
N
- Experience in cybersecurity posture assessments, cyber maturity assessments, cyber risk assessments, and compliance gap assessments.
N




- Familiarity with SOC 2 Type II requirements, Trust Services Criteria, control mapping, audit evidence, and readiness activities.
N
- Strong capability in developing and reviewing cybersecurity policies, standards, procedures, risk registers, control matrices, and compliance documentation.
N
- Experience in conducting cybersecurity training and awareness initiatives.
N
- Ability to interpret regulatory and framework requirements and translate them into practical, measurable, client-specific controls.
N
- Strong report-writing, documentation, presentation, stakeholder-management, and client communication skills.
N
- Ability to manage multiple concurrent engagements, meet project timelines, and work independently with limited supervision.
N
- Proficiency in Microsoft Word, Excel, PowerPoint, and documentation/reporting tools.
N

nMandatory Certifications

NCandidates must hold the following valid certifications:

N

n
- ISO/IEC 27001:2022 Lead Auditor
N
- ISO 22301 Lead Auditor
N
- Certified Information Systems Auditor (CISA)
N

nIf interested please share resume at [email protected]

📌 Opening For Cybersecurity Grc Consultant @ Mumbai (Alibag)
🏢 Quess IT Staffing
📍 Alibag