Job Description

Hi,

Exp: 3+ Years

One of the certifications is mandatory.
- ISO/IEC 27001:2022 Lead Auditor
- ISO 22301 Lead Auditor
- Certified Information Systems Auditor (CISA)
- 3 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
- Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.
- Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.
- Conduct cybersecurity posture assessments, maturity assessments,



control effectiveness reviews, and compliance gap assessments.
- Assess client environments against relevant frameworks and standards, including:
- ISO/IEC 27001:2022
- NIST Cybersecurity Framework and related NIST guidance
- SOC 2 Type II requirements
- Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirements
- General Data Protection Regulation (GDPR)
- Data privacy principles, privacy governance, and privacy-by-design requirements
- RBI cybersecurity, IT governance, outsourcing, digital-

📌 Opening for Business Continuity Manager @ Mumbai
🏢 Quess IT Solutions
📍 Mumbai