Cyber Security GRC Consultant @ Mumbai (Gpo)

Position: Cybersecurity GRC Consultant

Location: Mumbai

Duration: Contract to Hire

Job Description: Cybersecurity GRC Consultant

Location: Mumbai, Maharashtra

Experience: 56 years of relevant cybersecurity consulting and audit experience

Employment Type: Full time

We are seeking a knowledgeable and client-focused Cybersecurity GRC Consultant to support consulting, assessment, audit, compliance, and documentation engagements across information security, privacy, regulatory compliance, third-party risk, and cyber resilience. The ideal candidate will have hands-on experience delivering cybersecurity GRC engagements for clients, interpreting regulatory requirements, conducting maturity and posture assessments, and preparing high-quality client-facing reports, policies, and remediation roadmaps.

Role Overview

The Cybersecurity GRC Consultant will work with clients across industries to assess, design, implement, and improve cybersecurity governance, risk, compliance, privacy, and resilience programs. The role requires strong consulting capability, audit experience, stakeholder management skills, and the ability to translate technical and regulatory requirements into actionable business controls.

The consultant will contribute to engagements involving ISO standards, NIST-based assessments, Indian financial-sector regulations, privacy compliance, third-party risk management, cyber risk assessment, policy development, awareness programs, and audit readiness.

Key Responsibilities

• Conduct cybersecurity GRC consulting, assessment, audit, and advisory engagements for client organizations.
• Perform ISO/IEC 27001:2022 ISMS gap assessments, internal audits, implementation support, risk assessments, control reviews, and certification-readiness activities.
• Support business continuity and resilience engagements aligned with ISO 22301, including BCMS documentation, business impact analysis, risk assessment, continuity planning, and exercise support.
• Conduct cybersecu .