Role & responsibilities

- Conduct governance, risk, and compliance assessments across IT systems, business processes, and information security controls.
- Perform CICA-related assessments and internal control reviews, based on the applicable organizational framework.
- Identify control gaps, compliance deviations, and potential risks, and recommend corrective actions.
- Assist in conducting risk assessments, control testing, and compliance audits.
- Review policies, procedures, standards, and supporting evidence to assess compliance with defined requirements.
- Support audits aligned with frameworks such as ISO 27001, NIST, and other applicable security and compliance standards.
- Maintain risk registers, compliance trackers, audit evidence, and remediation records.




- Coordinate with internal teams and stakeholders to collect audit evidence and follow up on corrective actions.
- Prepare audit reports, risk assessment reports, compliance documentation, and management updates.
- Track audit observations and remediation activities to ensure timely closure.
- Support internal and external audits and contribute to continuous improvement of governance and compliance processes.

Preferred candidate profile

- Relevant certifications such as CISA, ISO 27001 Lead Auditor/Implementer, CRISC, or equivalent.
- Experience with IT general controls (ITGC), internal audits, and security compliance assessments.
- Familiarity with regulatory requirements and industry-specific compliance frameworks.

📌 Grc Consultant- CISA (Navi Mumbai)
🏢 Qseap Infotech
📍 Navi Mumbai