Security Consultant - GRC

Job Title: Security Consultant - GRC

Responsibilities

• Support the implementation, maintenance, and continuous improvement of information security compliance programs, specifically focusing on ISO 27001, SOC 1 and SOC 2.
• Develop, review, and update security policies, procedures, and guidelines to align with relevant compliance frameworks and regulatory requirements.
• Conduct risk assessments and gap analyses against ISO 27001 and NIST CSF controls to identify areas for improvement and ensure audit readiness.
• Prepare and compile documentation, evidence, and responses for customer RFIs and audit requests efficiently and accurately.
• Contribute in identification, assessment, and mitigation of information security risks in accordance with established risk management frameworks.
• Maintain comprehensive documentation of security controls, compliance activities, and remediation plans.
• Prepare regular reports on compliance status, key metrics, and areas of concern for management and stakeholders.
• Perform comprehensive third-party risk assessments to evaluate vendor compliance with information security policies.
• Ensure effective communication and documentation of third-party risk assessments.

Key Skills

• ISO 27001
• SOC 1
• SOC 2
• NIST CSF
• Risk assessments
• Third-party risk assessments
• Policy development
• Audit readiness
• Compliance documentation

Disclaimer: This job description has been sourced from a public domain and may have been modified by Naukri.com to improve clarity for our users. We encourage job seekers to verify all details directly with the employer via their official channels before applying.