Job Description
Hi,
n

nExp: 3+ Years
n

nOne of the certifications is mandatory.
n

n
- n
- ISO/IEC 27001:2022 Lead Auditorn
- ISO 22301 Lead Auditorn
- Certified Information Systems Auditor (CISA)n

n

n
- n
- 3 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.n
- Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.n
- Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.n
- Conduct cybersecurity posture assessments, maturity assessments, control effectiveness reviews, and compliance gap assessments.n
- Assess client environments against relevant frameworks and standards, including:n
- ISO/IEC 27001:2022n
- NIST Cybersecurity Framework and related NIST guidancen
- SOC 2 Type II requirementsn




- Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirementsn
- General Data Protection Regulation (GDPR)n
- Data privacy principles, privacy governance, and privacy-by-design requirementsn
- RBI cybersecurity, IT governance, outsourcing, digital-payment, and related regulatory requirementsn
- SEBI cybersecurity and cyber-resilience requirementsn
- IRDAI cybersecurity, information security, and related regulatory requirementsn
- Lead or support cyber risk management activities, including risk identification, control mapping, risk scoring, treatment planning, risk-register maintenance, and management reporting.n
- Conduct Third-Party Risk Management (TPRM) assessments, including vendor due diligence, cybersecurity questionnaires, risk evaluation, contractual security requirements, and remediation tracking.n

n

nIf interested, please share resume at [email protected]

📌 Opening for Business Continuity Manager @ Mumbai
🏢 Quess IT Staffing
📍 Mumbai