Opening for GRC Consultant @ Mumbai

Hi,
4-9 years of relevant experience in cybersecurity GRC consulting, information security consulting, IT audit, risk advisory, compliance, or related roles.
· Demonstrated experience working directly with clients in a consulting, advisory, audit, or assurance capacity.
· Hands-on experience in ISO/IEC 27001 implementation, gap assessment, internal audit, risk assessment, control documentation, or certification-readiness engagements.
· Strong understanding of NIST cybersecurity frameworks and their practical application in assessment and improvement programs.
· Working knowledge of DPDPA, GDPR, data privacy governance, data lifecycle controls, consent management concepts, data-subject rights, and privacy risk assessments.
· Experience with RBI, SEBI, and IRDAI cybersecurity and regulatory expectations; experience supporting BFSI clients will be preferred.
· Experience in Third-Party Risk Management, including vendor security assessments, supplier due diligence, risk classification, and remediation follow-up.
· Experience in cybersecurity posture assessments, cyber maturity assessments, cyber risk assessments, and compliance gap assessments.
· Familiarity with SOC 2 Type II requirements, Trust Services Criteria, control mapping, audit evidence, and readiness activities.
· Strong capability in developing and reviewing cybersecurity policies, standards, procedures, risk registers, control matrices, and compliance documentation.
· Experience in conducting cybersecurity training and awareness initiatives.
· Ability to interpret regulatory and framework requirements and translate them into practical, measurable, client-specific controls.
· Strong report-writing, documentation, presentation, stakeholder-management, and client communication skills.
· Ability to manage multiple concurrent engagements, meet project timelines, and work independently with limited supervision.
· Proficiency in Microsoft Word, Excel, PowerPoint, and documentation/reporting tools.
Mandatory Certifications
Candidates must hold any one of the following valid certifications:
· ISO/IEC 27001:2022 Lead Auditor
· ISO 22301 Lead Auditor
· Certified Information Systems Auditor (CISA)
If interested, please share resume at deepika.eaga@quesscorp.com

Work arrangement
No