Talent pipeline role
This listing describes a profile we regularly recruit for. It is not a confirmed vacancy with a specific employer. When you apply, your CV joins our talent pipeline for this type of role, and our team will contact you when a matching requirement opens.
About the Role
GRC Consultants help organisations build and maintain information security governance, risk management and compliance programmes. The role covers risk assessments, policy development, audits and regulatory alignment. It suits security governance professionals in Mumbai or Pune with experience in ISO 27001, regulatory frameworks and client-facing consulting. The role balances technical understanding with policy, audit and business communication.
Key Responsibilities
- Conduct information security risk assessments and gap analyses
- Develop and review security policies, standards and procedures
- Support ISO 27001, SOC 2 and regulatory compliance programmes
- Plan and perform internal audits and track remediation
- Advise stakeholders on third-party and vendor risk
Required Skills and Qualifications
- Degree in IT, engineering or a related field
- 4+ years in GRC, IT audit or security compliance
- Strong knowledge of ISO 27001, NIST and relevant Indian regulations such as RBI and SEBI guidelines
- Certifications such as ISO 27001 Lead Auditor, CISA or CISM
- Excellent documentation and stakeholder communication skills
Preferred Experience
Consulting or BFSI compliance experience, including DPDP Act readiness.
How to Apply
Submit your updated CV through the application form below, or email it to applythrive@gmail.com with the job title and reference TA-2038 in the subject line.
Apply Now
Apply for GRC Consultant
Fields marked * are required. Our recruitment team reviews every application.
Thank you. Your application has been received.
Our recruitment team will review your profile and contact you if there is a suitable match.