Urgent hiring for the role of GRC Consultant/GRC Manager/Loc: Navi Mumbai /Immediate Joiners

Hi folks,

We are currently hiring for the role of a GRC Consultant and GRC Manager Role with a Leading firm based in Navi Mumbai.

Designation: GRC Consultant & GRC Manager

Loc: Navi Mumbai

Experience for GRC Consultant : 1-2yrs

GRC Manager : 7yrs plus

Salary (1-2 yrs) - 9 LPA-10 LPA

Salary (7 yrs -10yrs) - 17 LPA (based on current CTC and interview performance)

(Mandatory: Comfortable with travelling to multiple client locations across the city)

Qualification: Graduate

Notice period: Immediate Joiners only

Day shift: 9 am to 6 pm/ Sat & Sun Offs

1. Responsibilities for GRC Consultant:

• Lead the enhancement of GRC frameworks and policies.
• Implement standards like

  ISO 27001, ISO 22301, and support client certifications.

• Identify, assess, and manage risks across business units.
• Understand and apply compliance requirements.
• Conduct training sessions for client SPOCs and end-users.
• Assist in developing and enhancing the GRC framework with support from senior consultants.
• Document info sec policies and procedures per regulatory and framework requirements.
• Help manage cyber security risks across various functions.
• Learn and apply compliance standards.
• Conduct awareness sessions on cyber security topics.

2.Responsibilities for GRC manager Role:

Job Title: Manager (7+ years)

Budget: 17lpa

Please note, we are focusing on candidates who are based in Mumbai to avoid relocation

requirements.

Information security professional with 7+ years of experience who have led end to end

project delivery and have handled a team.

Location: Mumbai (Client-facing role may require travel)

Key Responsibilities:

Subject Matter Knowledge

● Detailed understanding of various standards and frameworks in information security, cybersecurity, business continuity, privacy, regulatory compliance requirements for various industries (such as ISO 27001, NIST Cybersecurity

Framework, ISO 22301, SEBI, RBI, IRDA,, GDPR, CCPA (Data Privacy Regulations)

● Should have implemented at least 3-5 cycles of end to end implementation of standards and frameworks mentioned above.

● Knowledge of Security Domains: Familiarity with key areas of cybersecurity,

including:

○ Network Security (Firewalls, IDS/IPS, VPNs)

○ Cloud Security (AWS, Azure, GCP security principles, container security)

○ Application Security / DevSecOps (Secure coding practices, SAST/DAST)

○ New emerging technologies landscape

○ Identity and Access Management (IAM) (Authentication, authorization,privileged access)

○ Endpoint Security (Antivirus, EDR, mobile device management)

● Threat Landscape Awareness: Staying current with common attack vectors (e.g.,

phishing, ransomware, zero-day exploits), threat actors, and cybersecurity trends.

● Incident Response (IR) Lifecycle: Knowledge of the stages of incident response

(Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned) to

manage projects that improve IR capabilities or even help coordinate during a crisis.

● Read, research, build templates and deliverables specific to customer or general

templates for the work at hand

Project Life cycle Management & Ownership:

● Accountable for overall project success, client relationships, profitability, and

meeting strategic objectives.

● Primary escalation point for key client stakeholders; building and nurturing

long-term client relationships; identifying new business opportunities.

● Develop project plans, including weekly activity schedules/Sprint planning,

ensuring alignment with project goals and client expectations.

● Monitors overall project timelines; milestones, tracks and ensure billing, address

resource conflicts across projects.

Communication & Stakeholder Management:

● Serve as the primary point of contact for the client, maintaining a professional and

collaborative relationship throughout the project duration.

● Lead periodic client and internal project calls, communicating progress, identifying

day-to-day issues, and driving resolutions.

● Promptly identify, highlight, and escalate any project challenges, hindrances, or potential delays in milestones to the Management and client, proposing solutions where possible.

Team Leadership & Mentorship:

● Actively mentor and guide consultants working on the project.

● Clearly define and align consultants on their respective tasks, setting precise

expectations for quality, timeliness, and output.

● Regularly obtain updates from consultants, providing feedback and directing them

for task completion.

Pre-Sales and Business Development

● Actively participates in pre-sales, proposal development, and identifying new

business within existing accounts.

● Helps organization ideate new services and business lines

Qualifications:

● Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.

● Certifications such as CISA, CISSP, CISM, CEH,etc.

● Good communication skills and a willingness to learn.

What We Look For:

● Strong written and verbal communication skills.

● Expert-level knowledge of the Information Security industry, with a deep and

current understanding of relevant frameworks, threats, and trends.

● Ability to learn and fit into our company culture.

● Proven track record in client relationship management, business development,

and pre-sales.

Interested candidates kindly share your cv at Khushi@shunyatattva.co.in

or whts up at 9869200181

Regards,

Khushi Rane

Hr. Manager- Human Resources

Shunyatattva Management Consultant

Khushi@shunyatattva.co.in

9869200181