Company Description Code Decode Labs (CDL) is a research-driven cybersecurity firm founded in 2010 by IIT and IIM alumni, focused on uncovering real-world exposures rather than selling generic solutions. Empanelled by CERT-In and the Ministry of Defense, CDL is trusted by enterprises, government agencies, defense organizations, and startups across 35+ countries to secure highly sensitive infrastructure. The company holds multiple earned credentials, including ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 29119-1:2022, ISO 9001:2015, and is GDPR compliant. CDL specializes in penetration testing, red teaming, application and cloud security, data privacy and compliance, and vulnerability management, delivering clear risk insights and actionable remediation roadmaps. With over 10,000 projects delivered, CDL operates globally from India and remains committed to deep, research-led security work. #Number of Job Positions = 25+ Openings (Immediate Joiners) Preferred Applicants = Immediate Joiners & Mumbai / Pune Residents Role Description This, 'IT Assurance Audit Analyst / IT GRC Consultant', is a full-time, on-site role based in Mumbai for a year long client contractual project. This role is responsible for planning and executing IT audits focused on governance, risk, and compliance, including assessment of IT controls, security frameworks, and regulatory requirements. The consultant will perform risk assessments, review policies and procedures, evaluate business continuity and disaster recovery plans, and document findings with transparent recommendations for remediation. Day-to-day activities include collaborating with cross-functional teams,



conducting interviews and control testing, preparing audit reports and presentations, and supporting clients in closing gaps identified during audits. The role also involves staying current with relevant standards, regulations, and best practices to continuously improve client’s GRC and audit methodologies. Qualifications
• 3-6 years experienced ISMS & GRC Audit consulting proven experience for banks / BFSI / Enterprises
• IT GRC / ISMS Auditing Certifications
• Strong foundational knowledge in Information Technology and Information Security, with the ability to understand complex infrastructures and security architectures.
• Hands-on experience with IT Audit and IT Controls, including planning, execution, testing, and reporting of control effectiveness.
• Exposure to Business Continuity and related risk management practices, including disaster recovery planning and resilience assessments.
• Familiarity with governance, risk, and compliance (GRC) frameworks and standards (e.g., ISO 27001, NIST, PCI DSS, GDPR or similar).
• Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field; professional certifications such as CISA, CISSP, CISM, ISO 27001 LA, or equivalent are an advantage.
• Strong analytical, documentation, and report-writing skills, with the ability to communicate complex findings clearly to technical and non-technical stakeholders.
• Ability to work on-site with clients, manage multiple engagements, and collaborate effectively in a team-based, research-focused environment.

📌 IT GRC Audit Consultant (Mumbai)
🏢 Code Decode Labs
📍 Mumbai