Requirements

- 1-2 years of demonstrable experience in information security, specifically within risk management, third-party risk assessment, or GRC-focused roles.
- Graduate degree in Computer Science, Information Technology, Cybersecurity, or a closely related technical field.
- Proven ability to conduct thorough risk assessments and vendor risk assessments, effectively identifying security gaps, potential threats, and compliance challenges.
- Familiarity with common information security frameworks and standards, including ISO 27001, NIST Cybersecurity Framework, and SOC 2.
- Solid analytical and problem-solving skills, with a keen aptitude for evaluating complex security controls, processes, and contractual agreements.
- Excellent written and verbal communication skills for drafting comprehensive reports, presenting findings to clients, and fostering effective vendor interactions.




- Ability to work effectively in an onsite, client-facing capacity in Gurugram.

Nice-to-Have

- Practical experience with GRC platforms or dedicated vendor risk management tools.
- Understanding of regulatory compliance requirements such as GDPR, CCPA, or HIPAA, particularly as they pertain to third-party data processing.
- Foundational knowledge of cloud security principles and architectures (e.g., AWS, Azure, GCP) relevant to evaluating cloud service providers.
- Relevant industry certifications such as CISA, CISM, or CRISC.

? ???? ??-??-???? ???? ??? ?????? ??? ???????? ??? ???????? ???????? ?? ????????? ??: eSec Forte® Technologies!

📌 Information Security Consultant (TPRM) (Gurugram)
🏢 eSec Forte® Technologies
📍 Gurugram