IT Security Consultant

Experience: 5+ years in information security consulting, GRC or security advisory

You will advise business and technology teams on security risk, run assessments, and lead compliance and audit readiness. The role is advisory first: you turn frameworks and findings into decisions that leadership and engineers can act on.

Responsibilities

- Run security risk assessments and gap analyses against ISO 27001, NIST CSF, SOC 2 and CIS Controls.
- Write and maintain security policies, standards and procedures, and get them adopted.
- Lead audit and certification readiness, coordinate external auditors and manage evidence collection.
- Review the security architecture of new systems, integrations and cloud changes, and recommend controls.
- Assess third-party and vendor risk, and answer customer security questionnaires and due-diligence requests.
- Scope and coordinate vulnerability assessments and penetration tests, and track findings to closure.
- Maintain the risk register and report risk posture and metrics to leadership.
- Advise on data protection obligations under GDPR and India's DPDP Act.
- Plan and run incident response and business continuity tabletop exercises.
- Deliver security awareness training and phishing simulations.

Required skills
- 5+ years in information security consulting, GRC,



IT audit or an internal security advisory role.
- Working knowledge of ISO 27001:2022, NIST CSF or SP 800-53, SOC 2 and PCI DSS.
- Risk assessment methods such as ISO 27005 or FAIR.
- Broad technical grounding: networks, cloud platforms (AWS or Azure), identity and access management, encryption and endpoint security.
- Experience taking an organisation through at least one external audit or certification cycle.
- Practical understanding of data privacy regulation and its effect on system design.
- Robust report writing for both executive and technical readers.
- Confident stakeholder management, including saying no and offering a workable alternative.

Good to have
- Certifications: CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor / Lead Implementer.
- GRC tooling such as Vanta, Drata, ServiceNow GRC or Archer.
- Cloud security certification such as CCSP.
- Earlier hands-on background in penetration testing or security engineering.
- Experience with SaaS or multi-tenant products and customer-facing security reviews.

Employment Type: Full-Time

Work Mode:Onsite In Person

Work Location:Guindy, Chennai, Tamil Nadu

Pay: ₹416,000.00 - ₹1,320,000.00 per year

Work Location: In person

📌 IT Security Consultant (Guindy)
🏢 Regent Campus D2
📍 Guindy