Job
Description
About the Role We are seeking a proactive and detail-oriented Associate GRC (Governance, Risk & Compliance) Consultant to join our growing team in Mumbai . As an Associate Consultant, you will assist in delivering GRC-related services to clients across various industries, supporting risk management, regulatory compliance, and governance frameworks. Key Responsibilities Assist in conducting risk assessments, compliance reviews, and internal control evaluations. Support the implementation and maintenance of GRC tools and platforms. Assist in documenting policies, procedures, and control frameworks (e.g., ISO 27001, SOC 2, GDPR, HIPAA, etc.). Participate in client meetings, gather requirements, and help design and implement effective risk mitigation strategies. Conduct gap assessments and help prepare audit and regulatory readiness documentation. Monitor changes in regulatory and risk landscapes and assist in updating risk registers and compliance matrices accordingly. Collaborate with cross-functional teams, including IT, operations, and legal, to support GRC initiatives. Prepare reports, dashboards, and presentations for internal and client use. Required Qualifications & Skills Bachelor's degree in Information Security, Computer Science, Management, or a related field. 1–3 years of relevant experience in GRC, risk management, audit, compliance, or cybersecurity domains. Familiarity with frameworks such as ISO 27001, NIST, COBIT, SOX, PCI DSS, etc. Understanding of GRC tools (e.g., RSA Archer, MetricStream, ServiceNow GRC, etc.) is a plus. Strong analytical, problem-solving, and communication skills. Ability to handle multiple tasks and adapt in a fast-paced client-facing environment. Relevant certifications (optional but desirable): ISO 27001 LA/LI, CISA, CRISC, or similar. Urgent joining preferred. Show more Show less
