Key Responsibilities:

- Implement and manage Governance Risk and Compliance GRC programs

- Perform enterprise risk assessments and maintain risk registers

- Define review and update security policies standards procedures and controls

- Support regulatory compliance requirements such as ISO 27001 SOC 2 GDPR HIPAA PCI DSS SOX NIST and COBIT

- Conduct control testing compliance assessments and gap analyses

- Coordinate internal and external audits and track remediation activities

- Monitor compliance metrics and prepare governance reports and dashboards

- Work with business and technology teams to identify assess and mitigate risks

- Ensure third party vendor risk assessments are completed and reviewed

- Support cybersecurity governance initiatives and risk treatment plans

- Drive awareness programs related to risk and compliance requirements

- Required Skills
- Solid understanding of GRC frameworks and methodologies





- Experience with risk assessment risk management and compliance monitoring

- Knowledge of ISO 27001 NIST CSF COBIT SOX PCI DSS GDPR HIPAA or SOC frameworks

- Experience with GRC tools such as

- ServiceNow GRC

- RSA Archer

- OneTrust

- MetricStream

- AuditBoard
- Understanding of information security controls and cybersecurity best practices

- Experience in audit management and control testing

- Strong analytical documentation and stakeholder management skills

- Preferred Skills
- Experience in cloud compliance Azure AWS GCP

- Knowledge of third party risk management TPRM

- Familiarity with Cybersecurity IAM Data Privacy and Security Operations

- Experience in enterprise risk governance and reporting

Technical Requirements:

- Primary skills Technology SAP Functional SAP GRC

Preferred Skills:

Technology->SAP Functional->SAP GRC

📌 GRC Consultant (Bengaluru)
🏢 Infosys
📍 Bengaluru