Job DescriptionHi,
n

nExp: 3+ Years
n

nOne of the certifications is mandatory.
n

n
n
ISO/IEC 27001:2022 Lead Auditorn
ISO 22301 Lead Auditorn
Certified Information Systems Auditor (CISA)n

n

n
n
3 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.n
Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.n
Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.n
Conduct cybersecurity posture assessments, maturity assessments, control effectiveness reviews, and compliance gap assessments.n
Assess client settings against relevant frameworks and standards, including:n
ISO/IEC 27001:2022n
NIST Cybersecurity Framework and related NIST guidancen
SOC 2 Type II requirementsn




Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirementsn
General Data Protection Regulation (GDPR)n
Data privacy principles, privacy governance, and privacy-by-design requirementsn
RBI cybersecurity, IT governance, outsourcing, digital-payment, and related regulatory requirementsn
SEBI cybersecurity and cyber-resilience requirementsn
IRDAI cybersecurity, information security, and related regulatory requirementsn
Lead or support cyber risk management activities, including risk identification, control mapping, risk scoring, treatment planning, risk-register maintenance, and management reporting.n
Conduct Third-Party Risk Management (TPRM) assessments, including vendor due diligence, cybersecurity questionnaires, risk evaluation, contractual security requirements, and remediation tracking.n

n

nIf interested, please share resume at

📌 Opening For Business Continuity Manager @ Mumbai
🏢 Quess IT Staffing
📍 Mumbai