GRC Consultant

Job highlights

• 5+ years experience in cybersecurity governance and compliance, proficiency with GRC tools, knowledge of NIST, ISO 27001, COBIT, GDPR, HIPAA, PCI-DSS
• Develop and implement cybersecurity policies, conduct risk assessments, ensure regulatory compliance, and manage internal and external audits

Please focus on sourcing immediate joiners who are local to Chennai and familiar with the local language. This will greatly enhance our chances of finding the right fit quickly. We are looking for candidates who can join immediately.

exp : relevant 5+yrs

Key Responsibilities:

• Governance:

• Develop and implement cybersecurity policies, standards, and procedures in line with industry best practices (e.g., NIST, ISO 27001, COBIT).

• Conduct regular reviews and updates of security policies to ensure they remain current and effective.

• Coordinate with various departments to ensure compliance with security policies and standards.

• Risk Management:

• Perform risk assessments to identify and evaluate security risks.

• Develop risk mitigation strategies and work with stakeholders to implement appropriate controls.

• Monitor and report on the effectiveness of risk management activities.

• Compliance:

• Ensure compliance with regulatory requirements, such as GDPR, HIPAA, PCI-DSS, and other relevant standards.

• Conduct internal audits and assessments to verify compliance with security policies and regulatory requirements.

• Prepare for and manage external audits, working closely with auditors to provide necessary documentation and information.

Skills:

• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Ability to work effectively with cross-functional teams and stakeholders.
• Detail-oriented with strong organizational skills.
• Proficiency in using GRC tools and software.