Job description
- GRC Consultant – Compliance Operations

Experience:
[2-5 years] Type: Full time iCompaas India

Location:
iCompaas HQ Company Overview: iCompaas is a fast-growing B2B compliance automation platform. We help businesses get and stay compliant with frameworks like ISO 27001, SOC 2, HIPAA, GDPR, and DPDP, with less manual effort and a stronger security posture, especially in cloud environments.
• GRC Consultant
- Compliance Operations You'll be the compliance expert our customers rely on from kick-off to certification. You'll guide clients through their compliance journey, work directly with auditors, and use the iCompaas platform (app.iCompaas.com) to automate evidence collection. You own client outcomes end to end: scope, timelines, evidence, and audit readiness.

KEY RESPONSIBILITIES

What You'll Do
Run gap and risk assessments: Assess each client's current controls against their framework, build a remediation roadmap, and maintain the risk register and treatment
• Onboard clients: Lead kick-off calls to define compliance scope, timelines, and milestones for each client's chosen frameworks.
• Run gap and risk assessments: Assess each client's current controls against their framework, build a remediation roadmap, and maintain the risk register and treatment plans.
• Drive progress: Run weekly check-ins to track status, clear blockers, and coach client teams on requirements and best practices.
• Own policies: Create, customise, and review policy documents that fit each client's organisation and regulatory needs.
• Run evidence collection: Define what evidence is needed, guide clients in gathering it, and organise it in the platform.
• Set up integrations: Connect client tools and cloud environments to iCompaas for automated evidence capture and continuous control monitoring.




• Keep clients audit-ready: Maintain a readiness tracker per client, support internal audits, spot gaps early, and coordinate remediation before audit dates.
• Work with auditors: Be the main point of contact between clients and third-party auditors, sharing evidence packages and answering queries through to certification.
• Translate compliance: Turn complex requirements into clear, actionable steps for nontechnical stakeholders.
• Grow accounts: Spot opportunities to deepen product adoption, add frameworks, and pass expansion leads to Sales. Share customer feedback with the Product team. WHAT WE'RE LOOKING FOR
• Must have 2-5 years of experience in GRC, compliance, information security consulting, or audit.
• Bachelor's degree in IT, Computer Science, Information Security, or a related field.
• Working knowledge of at least two of: ISO 27001, SOC 2, HIPAA, GDPR, DPDP.
• Hands-on experience with gap assessments, risk assessments, and policy writing.
• Experience supporting external audits: preparing evidence packages and handling auditor queries.
• Strong communication skills, with the ability to explain regulatory language to both business and technical audiences.
• Proven ability to manage multiple client timelines at once A proactive, self-directed approach: you flag risks early and arrive with solutions Nice to have:
• ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISSP, or CCSP Hands-on use of a GRC automation platform (Vanta, Drata, Sprinto, Scrut, or similar)
• Experience in SaaS customer success, client-facing consulting.
• Familiarity with AWS, Azure, or GCP and common SaaS integrations (identity, HRIS, ticketing, source control).
• Exposure to India regulations (RBI, SEBI) or newer standards such as ISO 27701 and ISO 42001.
• Experience with third-party risk management

📌 GRC Consultant – Compliance Operations (Hyderabad)
🏢 iCompaas
📍 Hyderabad