Sr. GRC consultant

Company Description Arrow Cyber Technologies is a trusted cybersecurity partner focused on helping organizations strengthen digital security and stay ahead of evolving cyber threats. The company delivers innovative, reliable, and scalable security solutions that protect critical infrastructure, sensitive data, cloud environments, networks, and applications. With deep technical expertise and a proactive, risk-based approach, Arrow Cyber Technologies positions cybersecurity as a strategic business enabler that supports growth, resilience, and compliance. Its services span SOC, MDR, VAPT, cloud security, GRC, incident response, digital forensics, and security awareness training. Guided by a mission to minimize risk, ensure business continuity, and build lasting digital trust, the team is committed to excellence, integrity, and customer-focused service.
Role Description The Sr. GRC Consultant will lead governance, risk, and compliance engagements for clients, translating cybersecurity and regulatory requirements into practical policies, controls, and processes. This full-time, on-site role based in Ahmedabad involves conducting risk assessments, designing and implementing GRC frameworks, and aligning security controls with standards such as ISO 27001, NIST, SOC 2, and relevant data protection regulations. The consultant will collaborate with technical and business stakeholders to develop security policies, procedures, and reporting dashboards, and will support audits, compliance reviews, and remediation initiatives. Day-to-day responsibilities include analyzing client environments, preparing documentation and recommendations, providing guidance on regulatory and industry best practices, and delivering presentations and training to promote a strong security and compliance culture.
Qualifications
Strong experience in Governance, Risk & Compliance, including development and implementation of GRC frameworks, policies, and procedures.
Hands-on expertise with information security standards and regulations (e.g., ISO 27001/27701, NIST, SOC 2, PCI DSS, GDPR or other data protection laws).
Proven ability to perform risk assessments, control gap analyses, and compliance readiness reviews, and to define remediation plans.
Experience working closely with SOC, MDR, cloud security, and security consulting teams to align technical controls with governance and risk objectives.
Strong analytical, documentation, and report-writing skills, with the ability to present complex topics clearly to both technical and non-technical stakeholders.
Demonstrated stakeholder management skills, including facilitation of workshops, training sessions, and audit/compliance meetings.
Relevant professional certifications such as CISA, CISM, CISSP, ISO 27001 Lead Implementer/Lead Auditor, or similar are highly desirable.
Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent practical experience.
Ability to work on-site

Work arrangement
No