Role &

Responsibilities :

- Lead cybersecurity consulting engagements, including security assessments, risk assessments, gap assessments, and security maturity reviews.
- Assess clients' cybersecurity posture against frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2, and applicable regulatory requirements.
- Identify, analyze, and prioritize cybersecurity risks and recommend appropriate remediation strategies.
- Develop and review cybersecurity policies, standards, procedures, guidelines, and governance frameworks.
- Conduct Vulnerability Assessment and Penetration Testing (VAPT) coordination and support remediation of identified vulnerabilities.
- Perform security reviews of applications, infrastructure, cloud environments, networks, and third-party/vendor ecosystems.
- Support Security Architecture and Design reviews, including network security, IAM, cloud security, endpoint security, and data protection.
- Advise clients on cloud security across platforms such as AWS, Azure, or GCP.
- Support Identity and Access Management (IAM) initiatives, including privileged access, access reviews, authentication, and authorization controls.
- Conduct cybersecurity audits and support internal, external, and regulatory audits.
- Develop risk registers, security assessment reports, executive dashboards, and remediation roadmaps.
- Assist with incident response, cybersecurity investigations, and security improvement initiatives where required.
- Evaluate third-party and supplier security risks and perform vendor security assessments.
- Stay current with emerging threats, vulnerabilities, attack techniques, cybersecurity technologies, and regulatory changes.
- Lead client discussions, workshops, presentations,



and cybersecurity awareness sessions.
- Mentor junior cybersecurity consultants and review their deliverables.
- Manage multiple cybersecurity projects simultaneously while ensuring quality, timelines, and client expectations are met.

Preferred Candidate Profile :

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
- 5 - 10 years of relevant experience in cybersecurity, information security, GRC, security consulting, risk management, or a related field.
- Strong understanding of cybersecurity principles, enterprise security architecture, risk management, and security controls.

Core Competencies :

- Cybersecurity Governance, Risk & Compliance (GRC)
- Vulnerability Management / VAPT
- Cloud Security
- IAM / PAM
- Security Architecture
- Incident Response / SOC
- Third-Party Risk Management
- Data Security
- Application Security

Requirements :

- Strong knowledge of cybersecurity frameworks and standards such as ISO 27001, NIST, CIS, PCI DSS, SOC 2, and relevant regulatory requirements.
- Experience conducting security assessments, audits, risk assessments, and gap assessments.
- Solid analytical and problem-solving skills with the ability to translate technical risks into business impact.
- Excellent communication and presentation skills, with the ability to interact effectively with C-level executives, business stakeholders, IT teams, and technical teams.
- Strong report-writing and documentation skills.
- Ability to independently manage cybersecurity consulting engagements from scoping through delivery and remediation.
- Relevant certifications are preferred, such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, Security , CEH, OSCP, or cloud-security certifications.

📌 Senior Cyber Security Consultant - GRC/Cloud Security (India)
🏢 Good
📍 India