Required qualifications and experience

- Bachelors degree in information technology, Computer Science, Engineering or a related field.

- 8 to 10 years of total experience in IT and information security, with at least 5 years in GRC, compliance or security consulting.

- Led at least 1 - 2 end-to-end ISO 27001 implementations that achieved certification, with hands-on audit-readiness experience.

- Working knowledge of ISO 22301 and ISO 27701, plus at least one of SOC 2, NIST CSF or HIPAA.

- Practical experience with data privacy regulations, ideally DPDP Act 2023 and GDPR.

- Hands-on familiarity with vulnerability management, VAPT and network security concepts.

- Experience in client-facing consulting roles, including managing engagements or small project teams.

Skills and competencies

Core skills

- Strong command of ISO 27001 Annex A controls and clause requirements,



risk methodologies and audit evidence expectations.

- Ability to write clear, audit-ready policies, procedures, risk reports and executive summaries.

- Comfort translating technical findings into business risk for non-technical leaders.

- Proficiency with GRC/privacy platforms, vulnerability scanners and project management tools.

Skilled skills

- Excellent verbal and written communication; confident in workshops and board-level presentations.

- Stakeholder management across cultures and time zones.

- Training and facilitation ability for awareness sessions and formal courses.

- Structured, detail-oriented and able to manage several client engagements at once.

- Willingness to travel for client assessments and audits as required.

📌 Hiring For Senior Security Consultant ( 8 To 10 years ) - Pune - WFO
🏢 Nihilent
📍 Pune