Grc Consultant

Company Description QuasarCyberTech (QCT) is a forward-thinking IT services provider focused on the evolving demands of modern digital and cloud environments. The company offers a comprehensive portfolio of services, including managed IT, consulting and advisory, cybersecurity, staff augmentation, software engineering, and education and training. QCT works as a trusted partner to help organizations strengthen their technology foundations, improve security posture, and drive innovation. Team members collaborate with diverse clients and technologies, gaining exposure to complex, real-world challenges in IT and cybersecurity.
Role Description The GRC Consultant will work full time on-site in the Nashik Region, supporting clients in designing, implementing, and maintaining governance, risk, and compliance frameworks. Day-to-day responsibilities include assessing existing policies and controls, performing risk assessments, and mapping regulatory and industry requirements to practical, operational processes. The consultant will prepare documentation such as policies, procedures, and reports, and assist in audit readiness and remediation activities. The role involves collaborating with technical and non-technical stakeholders, advising on best practices for cybersecurity and IT risk management, and supporting continuous improvement of clients’ security and compliance posture.
Qualifications
Strong knowledge of governance, risk, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, GDPR, PCI DSS) and the ability to translate them into practical controls and processes.
Experience conducting risk assessments, control testing, gap analyses, and audit preparation in IT and cybersecurity environments.
Ability to create clear GRC documentation, including policies, procedures, standards, and reports, with strong written and verbal communication skills.
Familiarity with cybersecurity principles, secure IT operations, and common security tools or platforms; prior work with managed IT or consulting environments is beneficial.
Comfort collaborating with cross-functional teams, facilitating workshops or meetings, and presenting findings to stakeholders and leadership.
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field; relevant certifications (e.g., CISA, CISM, CRISC, ISO 27001 Lead Implementer/Auditor) are a plus.
Ability to work on-site in the Nashik, open to travel at client side, manage multiple client engagements, and meet deadlines in a fast-paced environment.

Work arrangement
Hybrid