Our partner is looking for an Information Security Consultant based in India. We are looking for a motivated Information Security Consultant to join a Governance, Risk, and Compliance (GRC) team and support organizations in strengthening their cybersecurity posture. In this role, you will deliver a broad range of consulting engagements, from compliance assessments and certification projects to ongoing security advisory and risk management. You will work with clients at different stages of security maturity, helping them build effective programmes and address practical security challenges. This fully remote chance offers exposure to diverse industries, international clients, and opportunities to develop your expertise while taking ownership of meaningful projects. Accountabilities - Deliver governance, risk, and compliance engagements aligned with recognized frameworks, including ISO 27001, SOC 2, NIST, and relevant regional standards. - Conduct gap analyses, security posture assessments, and maturity reviews to identify weaknesses and improvement opportunities. - Design and implement security programmes, policies, procedures, risk registers, and control frameworks tailored to client requirements. - Provide ongoing security advisory services, including virtual CISO (vCISO)-style support and security programme improvement. - Evaluate existing security programmes, risk management practices, controls, and operational processes, recommending realistic improvements. - Help clients prioritize security initiatives based on risk exposure, business objectives,



and available resources. - Lead client meetings, workshops, and risk assessment sessions, engaging with technical teams, operational staff, and senior leadership. - Build trusted client relationships by asking insightful questions, constructively challenging assumptions, and communicating risks and trade-offs. - Take ownership of client engagements and workstreams from planning through delivery, managing multiple priorities and raising risks or blockers proactively. - Produce accurate, high-quality client deliverables and maintain consistent consulting standards. - Use GRC platforms such as Vanta and contribute to scoping and shaping additional client projects. - Share knowledge and expertise with colleagues while supporting the continuous development of the wider GRC team. Requirements: - 2–5 years of experience in information security, cybersecurity, risk management, compliance, or governance, risk, and compliance (GRC). - Previous consulting or other client-facing experience, ideally supporting external organizations with compliance, assurance, or security improvement initiatives. - Practical experience working with at least one recognized security framework, such as ISO 27001, SOC 2, or NIST. - Working understanding of how security controls, risk management, and security operations function in practice, beyond theoretical framework requirements. - Experience supporting compliance activities, security assessments, or the development and improvement of security programmes. -

📌 Information Security Consultant Fully Remote (India)
🏢 Jobgether
📍 India