Sr. Consultant - IT GRC

Company Description Infopercept is a global cybersecurity company focused on delivering end-to-end security outcomes through its unified platform, Invinsense. The organization converges detection, exposure management, and compliance across IT, OT, Cloud, IoT, and AI environments, helping clients stay ahead of evolving threats. With a philosophy that cybersecurity should be continuous, converged, and outcome-driven, Infopercept operates as an extension of client teams to provide visibility, accountability, and protection. The company specializes in enterprise IT and OT security, cloud and IoT security, AI-aware security, managed detection and response (MDR), and compliance and exposure management. Infopercept’s mission is to enable organizations worldwide to achieve digital resilience through intelligent and accountable cybersecurity.
Role Description The Sr. Consultant – IT GRC is a full-time, on-site role based in Ahmedabad. This role is responsible for designing, implementing, and maintaining IT governance, risk, and compliance frameworks aligned with industry standards and regulatory requirements. Daily responsibilities include assessing IT and cybersecurity controls, conducting risk assessments, performing gap analyses, and recommending remediation plans across client environments. The Sr. Consultant will collaborate with stakeholders to develop policies, procedures, and standards, support audits, and prepare reports and dashboards for leadership. The role also involves advising clients on best practices, providing technical guidance, coordinating with internal security teams, and contributing to continuous improvement of Infopercept’s GRC methodologies and services.
Qualifications
Candidates should possess strong 5-10 years of IT Consulting and Consulting skills, with experience advising clients on governance, risk, and compliance strategies.
Candidates should possess solid Information Technology and Technical Support skills, enabling effective understanding of IT environments and support for control implementation.
Candidates should possess advanced Analytical Skills to interpret risk data, evaluate control effectiveness, and produce clear, actionable recommendations.
Knowledge of IT GRC frameworks and standards (e.g., ISO 27001, ISO 27701, ISO 22301, ISO 42001, NIST, SOC 2, PCI DSS) and experience with GRC tools or platforms.
Strong written and verbal communication skills, including the ability to prepare reports, policies, and presentations for technical and non-technical audiences.
Proven ability to work collaboratively with cross-functional teams and manage multiple engagements or projects independently.
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; relevant certifications (e.g., CISA, CISM, CISSP, ISO 27001, ISO 27701, ISO 22301, ISO 42001, Lead Implementer/Auditor) are a plus.
Experience in cybersecurity consulting or IT risk management, preferably in a client-facing or enterprise environment.

Work arrangement
No