Information Security Engineer

Role Description
Job Title: Consultant - Cyber Security GRC
Experience: 2-4 Years
Location: Bangalore
Role Overview
We are looking for a Cyber Security GRC Consultant to support Governance, Risk, Compliance (GRC), Privacy, and Business Continuity initiatives. The role involves working with internal teams and stakeholders to ensure compliance with security and privacy standards, manage audits, and improve the organization's security posture.
Key Responsibilities
Support Information Security, Privacy, and Business Continuity programs.
Assist in ISO 27001, ISO 27701, ISO 22301, SOC 2, HITRUST, GDPR, and regulatory compliance activities.
Conduct Privacy Impact Assessments (PIA/DPIA) and drive remediation of identified risks.
Support Third-Party Risk Management (TPRM) and security governance initiatives.
Develop and maintain security policies, procedures, and guidelines.
Review security questionnaires, RFPs, contracts, DPAs, and privacy addendums.
Work with stakeholders to ensure compliance with data protection laws such as GDPR, DPDP, and CCPA.
Assist in business continuity and cyber resilience programs.
Support audit preparation, reporting, metrics, and security council activities.
Promote information security and privacy awareness across the organization.
Required Skills
2-4 years of experience in Information Security, GRC, Privacy, or Compliance.
Knowledge of frameworks and standards such as:
ISO 27001, ISO 27701, ISO 22301
NIST CSF, NIST 800-53
PCI DSS, HIPAA, SOC 1/SOC 2, SOX
Understanding of privacy regulations such as GDPR, DPDP, and CCPA.
Experience with GRC tools like OneTrust, RSA Archer, or RSAM.
Basic knowledge of cloud security controls in Azure, AWS, or GCP.
Strong analytical, communication, and stakeholder management skills.
Qualifications
Bachelor's degree in Engineering or equivalent.
Preferred certifications:
CISSP, CISM, CISA, CRISC
CIPP, CIPM, CDPSE
ISO 27001/27701/22301 Lead Implementer or Auditor
Preferred Attributes
Strong attention to detail.
Good problem-solving and analytical skills.
Self-motivated and eager to learn.
Positive attitude and ability to work collaboratively.

Work arrangement
Hybrid