Hi,

Greetings from Quess Corp!

We have an exciting opportunity for a Cybersecurity GRC Consultant with Quess Corp Limited, working for our esteemed client 63SATS Cybertech.

About Quess Corp

Quess Corp Limited is a leading workforce and business solutions organization providing technology-driven staffing, IT solutions, managed services, and workforce management solutions across multiple industries. Quess supports enterprises with specialized technology talent and IT capabilities across areas including Cybersecurity, Cloud & Data Center, Applications & Data, Network & Security, and Digital Engineering.

Visit Quess Corp Official Website

About the Client 63SATS Cybertech

63SATS Cybertech Limited is a cybersecurity solutions provider and a subsidiary of 63 moons technologies Ltd., focused on protecting enterprises, government organizations, and critical infrastructure from cyber risks.

The company offers cybersecurity services across areas including:

- Technology GRC
- ISO 27001
- ISO 22301
- SOC 2 Compliance
- Privacy Regulatory Compliance
- Cybersecurity Regulatory Compliance
- Third-Party Security Risk Assessment
- Application Security Risk Assessment
- Cloud Security Audit
- Cybersecurity Awareness
- Cybersecurity assessments and advisory services

Client Location: FT Tower, 3rd Floor, CTS No. 256 & 257, Suren Road, Chakala, Andheri (East), Mumbai – 400093. Visit 63SATS Cybertech – Official Website

Job Opportunity – Cybersecurity GRC Consultant

Position: Cybersecurity GRC Consultant

Payroll: Quess Corp Limited

Client: 63SATS Cybertech

Location: Andheri East, Mumbai

Experience: 3–4 years relevant experience

Employment Type: Full-time

Role Overview

We are looking for a knowledgeable and client-focused Cybersecurity GRC Consultant with hands-on experience in cybersecurity consulting, assessment, audit, compliance, risk management, privacy,



and documentation engagements.

Key Responsibilities

- Conduct cybersecurity GRC consulting, assessment, audit, and advisory engagements.
- Perform ISO/IEC 27001:2022 gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.
- Support ISO 22301 / BCMS engagements, including BIA, risk assessment, continuity planning, documentation, and exercises.
- Conduct cybersecurity posture, maturity, control effectiveness, and compliance gap assessments.
- Assess client environments against ISO 27001, NIST, SOC 2 Type II, DPDPA, GDPR, RBI, SEBI, and IRDAI requirements.
- Perform cyber risk management activities including risk identification, control mapping, risk scoring, treatment planning, and risk-register maintenance.
- Conduct Third-Party Risk Management (TPRM) assessments, vendor due diligence, security questionnaires, risk evaluation, and remediation tracking.
- Support SOC 2 Type II readiness, control design assessments, evidence reviews, and compliance monitoring.
- Develop and review cybersecurity policies, standards, procedures, guidelines, frameworks, registers, and process documentation.
- Prepare assessment reports, audit reports, gap-analysis reports, compliance matrices, risk registers, remediation roadmaps, presentations, and management dashboards.
- Conduct cybersecurity awareness and training programs.
- Facilitate client workshops, interviews, walkthroughs, evidence reviews,



and leadership presentations.
- Track observations, risks, action plans, and closure evidence throughout the engagement.
- Collaborate with technical, legal, privacy, business, audit, and compliance stakeholders.

Required Skills & Experience
- 3–4 years of relevant experience in Cybersecurity GRC, Information Security Consulting, IT Audit, Risk Advisory, Compliance, or related roles.
- Strong client-facing consulting, advisory, audit, or assurance experience.
- Hands-on experience with ISO/IEC 27001 implementation, gap assessment, internal audit, and risk assessment.
- Robust understanding of NIST Cybersecurity Framework.
- Working knowledge of DPDPA, GDPR, privacy governance, data lifecycle controls, consent management, and privacy risk assessments.
- Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory requirements.
- Experience in TPRM and vendor security assessments.
- Experience in cybersecurity posture, maturity, risk, and compliance assessments.
- Familiarity with SOC 2 Type II, Trust Services Criteria, control mapping, and audit evidence.
- Strong documentation, report-writing, presentation, and stakeholder-management skills.
- Proficiency in MS Word, Excel, and PowerPoint.

Mandatory Certifications
- ISO/IEC 27001:2022 Lead Auditor
- ISO 22301 Lead Auditor
- CISA

Good-to-Have Certifications
- CISM
- ISO/IEC 42001 Lead Auditor
- Other relevant certifications in Privacy, Risk Management, Cloud Security, SOC, or Business Continuity.

Interested Candidates Interested candidates can share their updated CV along with the following details:

Interested Candidates

Interested candidates can share their updated CV along with the following details to [email protected].

Regards,

Yugandhar K.

Quess Corp Limited

📌 Grc Consultant (Mumbai)
🏢 Quess IT Solutions
📍 Mumbai