Job DescriptionHi,
N

nExp: 3+ Years
N

nOne of the certifications is mandatory.
N

n
n
ISO/IEC 27001:2022 Lead Auditor N
ISO 22301 Lead Auditor N
Certified Information Systems Auditor (CISA) N

n

n
n
3 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles. N
Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities. N
Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support. N
Conduct cybersecurity posture assessments, maturity assessments, control effectiveness reviews, and compliance gap assessments. N
Assess client settings against relevant frameworks and standards, including: N
ISO/IEC 27001:2022 N
NIST Cybersecurity Framework and related NIST guidance N
SOC 2 Type II requirements N




Data Protection and Digital Personal Data Protection Act, 2023 (DPDPA) requirements N
General Data ProtectionRegulation (GDPR) N
Data privacy principles, privacy governance, and privacy-by-design requirements N
RBI cybersecurity, IT governance, outsourcing, digital-payment, and related regulatory requirements N
SEBI cybersecurity and cyber-resilience requirements N
IRDAI cybersecurity, information security, and related regulatory requirements N
Lead or support cyber risk management activities, including risk identification, control mapping, risk scoring, treatment planning, risk-register maintenance, and management reporting. N
Conduct Third-Party Risk Management (TPRM) assessments, including vendor due diligence, cybersecurity questionnaires, risk evaluation, contractual security requirements, and remediation tracking. N

n

nIf interested, please share resume at deepika

📌 Opening For Business Continuity Manager @ Mumbai Alibag
🏢 Quess IT Staffing
📍 Alibag