Position: GRC – Lead Auditor

Experience: 2–5 Years

Location: Mumbai

Job Summary

We are looking for a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in Governance, Risk, and Compliance (GRC), IT security audits, and information security standards.

Key Responsibilities

- Develop and implement information security and compliance strategies, and track the status of IT security audit recommendations.
- Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable regulatory frameworks.
- Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments covering IT infrastructure, operational processes, and security controls.
- Conduct scheduled and targeted IT compliance audits for clients across sectors, including Banking/NBFC, Power, IT, Manufacturing, and Services.
- Develop and deliver information security awareness and training programs.
- Map various IT,



information security, and cybersecurity standards to integrated compliance frameworks and risk assessment processes.
- Identify compliance gaps, recommend corrective actions, and monitor remediation activities to ensure adherence to applicable standards and regulations.

Required Skills

- Hands-on experience in GRC, IT audits, and information security compliance.
- Knowledge of ISO 27001 and ISO 27701, ITGC, SOC 2, PCI DSS, GDPR, and NIST frameworks.
- Experience in internal auditing, risk assessment, control testing, and compliance documentation.
- Solid analytical, documentation, communication, and stakeholder management skills.

Candidate Preference

- Candidates with relevant ISO 27001 Lead Auditor experience or certification will be preferred.
- Mumbai-based candidates only

📌 GRC – Lead Auditor (Mumbai)
🏢 Arting Digital Private
📍 Mumbai