Summary
Tsaaro is seeking a detail-oriented and analytical Senior GRC Consultant to join our expanding team. In this pivotal role, you will leverage your expertise in governance, risk, and compliance to help clients navigate complex regulatory landscapes with confidence. Your work will be instrumental in strengthening organizational trust by designing and implementing robust security frameworks, ensuring adherence to industry standards, and driving measurable improvements in client compliance postures.
Responsibilities

- Execute comprehensive governance, risk, and compliance evaluations across diverse regulatory frameworks and industry standards.

- Guide organizations in deploying policies, procedures, and security controls that align with ISO requirements, including ISO 27001 and ISO 27701.

- Lead risk assessment initiatives, perform gap analyses, and evaluate the maturity levels of client environments.

- Facilitate the development and operationalization of Information Security Management Systems (ISMS) and Privacy Information Management Systems (PIMS).

- Generate detailed audit documentation, assessment reports, and strategic remediation roadmaps based on identified findings.

- Partner with technical and consulting units to ensure the seamless integration and effectiveness of compliance controls.

- Advise clients on meeting specific regulatory mandates, such as the GDPR, DPDP Act, and other global privacy and security laws.

- Execute internal audits, vendor risk evaluations, and ongoing compliance monitoring to foster a culture of continuous improvement.





- Maintain current knowledge of emerging trends and evolving standards in cybersecurity, privacy, and regulatory compliance.

Requirements

- Possess a Bachelor's degree in Information Security, Computer Science, Business Administration, or a closely related discipline.

- Demonstrate prior professional experience in governance, risk, and compliance functions, specifically involving ISMS, PIMS, audits, or regulatory implementation.

- Exhibit a solid command of established frameworks, including ISO 27001, ISO 27701, NIST, SOC 2, GDPR, and the DPDP Act.

- Possess the capability to perform risk assessments, conduct gap analyses, and map controls effectively.

- Display strong analytical capabilities, proficient written communication for reporting, and a meticulous attention to detail.

- Have a proven track record of collaborating with external clients, internal stakeholders, and cross-functional teams.

- Demonstrate the ability to manage multiple priorities, adhere to strict deadlines, and thrive within a dynamic consulting setting.

- Hold relevant qualified certifications, such as ISO 27001 Lead Auditor/Implementer, CIPP, or CIPM, which are considered advantageous.

BenefitsWhy Join Tsaaro?
• Work with a high-growth brand in privacy, cybersecurity, and compliance.
• Lead real-world GRC projects and deliver impactful consulting engagements.
• Collaborate with industry experts and a dynamic consulting team.
• Hybrid work options for flexibility and balance.
• Strong opportunities for professional advancement and certifications.

📌 Senior GRC consutlant - Gurgaon (India)
🏢 Tsaaro
📍 India