GRC Lead/GxP Consultant

Senior GRC Consultant

Company: Cywarden Global Services Pvt. Ltd.
Location: Mohali / Pune(Full time)/Remote(Contractual)
Experience: 8+ Years
Employment Type: Full-Time/Contractual

Role Overview

Cywarden Global Services is looking for an experienced Senior GRC Consultant to lead Governance, Risk & Compliance initiatives for enterprise clients. The ideal candidate should have strong experience in Information Security GRC, risk management, compliance, audits, and security frameworks.

Candidates with experience working with US-based Pharmaceutical / Life Sciences / Healthcare organizations will be strongly preferred.

Key Responsibilities

• Lead GRC, risk, compliance, and information security assessment activities.
• Conduct risk assessments, control assessments, gap assessments, and compliance reviews.
• Develop and maintain security policies, procedures, standards, and control documentation.
• Support internal/external audits, including evidence collection and remediation tracking.
• Perform control mapping against ISO 27001, SOC 2, NIST, CIS Controls, HIPAA/HITECH, and other applicable frameworks.
• Manage risk registers, compliance trackers, control matrices, and remediation plans.
• Conduct third-party/vendor risk assessments.
• Work with cybersecurity, IT, infrastructure, application, privacy, and business teams.
• Prepare compliance reports, audit documentation, risk dashboards, and management presentations.
• Support and guide junior GRC team members and manage client/stakeholder interactions.

Pharma / Life Sciences Experience – Preferred

Experience with US-based Pharma/Life Sciences clients and exposure to:

• GxP Compliance
• FDA Regulations
• 21 CFR Part 11
• Computer System Validation (CSV)
• Data Integrity
• HIPAA / HITECH
• Audit / Inspection Readiness

Required Skills

• 8+ years of experience in GRC, Information Security, Risk, Compliance, or IT Audit.
• Strong knowledge of GRC frameworks, controls, risk assessments, and audits.
• Hands-on experience with ISO 27001, NIST, SOC 2, CIS Controls, or similar frameworks.
• Strong documentation, analytical, communication, and stakeholder-management skills.
• Ability to independently manage GRC activities and client engagements.

Preferred Certifications

CISA | CISSP | CISM | CRISC | ISO 27001 Lead Auditor/Implementer

Preferred Candidate

Candidates with US client exposure, Pharma/Life Sciences experience, GxP/FDA/21 CFR Part 11 knowledge, and GRC consulting experience will be highly preferred.

Keywords: GRC, Governance Risk Compliance, Information Security, Risk Management, IT Audit, ISO 27001, SOC 2, NIST, CIS, HIPAA, GxP, FDA, 21 CFR Part 11, CSV, Data Integrity, Third Party Risk, Vendor Risk, Compliance, Cybersecurity.

Pay: ₹1,500,000.00 - ₹2,000,000.00 per year

Experience:

• GRC/GxP: 8 years (Preferred)

Shift availability:

• Night Shift (Required)

Work Location: In person