We are looking for a GRC Consultant to support our information security consulting and compliance services.
The candidate will be responsible for interacting with prospective clients, understanding their business and compliance requirements, providing consultancy, conducting assessments and preparing information security policies, procedures and other compliance-related documentation.
The role requires good communication skills, documentation capabilities and knowledge of information security standards and regulatory requirements.
Key Responsibilities
1. Client Interaction & Consulting
- Interact with prospective clients to understand their information security and compliance requirements.
- Attend client meetings and discuss their security and compliance needs.
- Explain applicable security standards, compliance requirements and consulting services.
- Provide guidance and recommendations to clients on information security and GRC requirements.
- Coordinate with clients throughout consulting and implementation activities.
- Support the presales team in preparing proposals and responding to client requirements.
2. GRC Documentation
- Prepare information security policies, procedures, guidelines and manuals.
- Develop documents required for ISO 27001 implementation and certification.
- Prepare risk assessment reports, risk registers and risk treatment plans.
- Prepare Statement of Applicability (SoA), asset registers and other compliance documents.
- Develop business continuity and disaster recovery documentation.
- Prepare internal audit reports, compliance reports and gap assessment reports.
- Customise documentation based on individual client requirements.
3. Assessment & Implementation
- Conduct information security gap assessments and compliance assessments.
- Identify security gaps and recommend corrective actions.
- Assist clients in implementing information security management systems (ISMS).
- Support clients in audit preparation and compliance activities.
- Coordinate with technical teams to address identified security gaps.
- Track implementation progress and ensure timely completion of assigned activities.
4. Standards & Regulatory Knowledge
- ISO/IEC 27001:2022.
- ISO 27701
- SOC 2
- IT General Controls (ITGC).
- Risk Assessment and Risk Management.
- Business Continuity Management (BCM).
- Indian DPDP Act and Rules.
- CERT-In directions and applicable Indian IT regulations.
Required Skills & Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field.
- 2–3 years of experience in GRC,
information security consulting or compliance.
- Valuable knowledge of ISO 27001 and information security management systems.
- Excellent documentation and report-writing skills.
- Good verbal and written communication skills.
- Ability to interact confidently with clients and conduct meetings.
- Proficiency in MS Word, Excel and PowerPoint.
- Ability to manage multiple client assignments independently.
Preferred Certifications:
- ISO 27001 Lead Implementer.
- ISO 27001 Lead Auditor.
- Certified Information Systems Auditor (CISA).
- Other relevant information security or GRC certifications.
Key Expectations:
- Independently interact with prospective and existing clients.
- Understand client requirements and provide appropriate consulting guidance.
- Prepare professional and customised compliance documentation.
- Manage assigned GRC consulting engagements.
- Coordinate with clients and internal technical teams.
- Deliver consulting assignments within agreed timelines.
Company Profile:
Amyntor Tech Solutions Pvt Ltd steered by young and experienced professionals from different walks of life we offer a plethora of skills. We are headquartered at Thiruvananthapuram, Kerala and got a presence all over India. We are proud to introduce ourselves as sentinel Cybersecurity service provider. We are vehemently endorsed by our customers by giving references from the nook and corner of the world.