GRC – Roles & Responsibilities

- Develop, implement, and maintain information security policies, procedures, and standards.
- Conduct IT and cybersecurity risk assessments and maintain risk registers.
- Support implementation and maintenance of ISO 27001, SOC 2, NIST, DPDP, and other compliance frameworks.
- Conduct compliance gap assessments and track remediation activities.
- Coordinate with internal teams for audit evidence collection and compliance requirements.
- Support internal and external audits and closure of audit findings.
- Perform third-party/vendor security risk assessments.
- Monitor compliance with organizational security policies and regulatory requirements.
- Prepare GRC reports, dashboards, risk reports, and management updates.
- Conduct or coordinate security awareness and compliance training.
- Maintain documentation related to policies, risks, controls, audits, and compliance.
- Coordinate with IT, cybersecurity,



HR, legal, and business teams to ensure security controls are implemented effectively.

Candidate Profile / Skills

Looking for candidates with:

- 2–5 years of experience in GRC / Information Security / IT Risk & Compliance.
- Good knowledge of ISO 27001 and information security controls.
- Exposure to SOC 2, NIST, DPDP, PCI DSS or similar frameworks.
- Experience in risk assessment, audit support, policy development, and compliance.
- Positive documentation and communication skills.
- Experience with GRC tools is an added advantage.
- Relevant certifications such as ISO 27001 Lead Auditor/Implementer, CISA, CISM, CRISC are preferred.

Pay: ₹621,931.17 - ₹1,845,246.29 per year

Work Location: In person

📌 GRC Consultant (India)
🏢 INFYSEC
📍 India