GRC Consultant (ISMS / ISO 27001 / IT Audit)

Job Title:

Experience:

Location:

Notice Period:

Employment Type:

GRC Consultant

Key Responsibilities:

• Implement and maintain

  ISMS frameworks

  based on

  ISO 27001

  standards.
• Assist in conducting

  gap assessments

  ,

  risk assessments

  , and

  internal audits

  .
• Support external ISO 27001 certification and surveillance audits.
• Prepare documentation such as policies, procedures, SoA, risk registers, etc.
• Collaborate with cross-functional teams to address compliance and audit findings.
• Conduct regular

  IT security audits

  and report on findings and remediation plans.
• Provide advisory on

  risk management, compliance

  , and

  information security best practices

  .
• Keep up to date with changes in relevant regulations, standards, and emerging security risks.

Required Skills & Qualifications:

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field.
• Minimum

  2 years of hands-on experience

  in

  GRC

  ,

  ISO 27001

  ,

  ISMS

  , and

  IT audit

  .
• Strong understanding of

  ISO 27001 controls

  , risk assessment methodologies, and audit lifecycle.
• Familiarity with

  compliance frameworks

  like NIST, GDPR, SOC 2 is a plus.
• Excellent communication and report writing skills.
• Ability to work independently and manage multiple client engagements.

Preferred:

• ISO 27001 Lead Auditor/Implementer certification

  is a strong advantage.
• Experience working with

  GRC tools

  (e.g., Archer, MetricStream, or similar).
• Candidates available to join

  immediately or within 15 days

  .
• Based in

  Mumbai

  or willing to relocate.