GRC Consultant

Responsibilities

• Strong understanding of SOC2 requirements, controls, and best practices.
• Actively participating in SOC2 and ISO audits.
• In-depth knowledge of security frameworks and standards such as HITRUST, ISO 27001, SOC 2 and GDPR.
• Coordinate with Security vendors for VAPT and other audits.

Must have: Non-Technical Competencies

• Excellent hands-on experience in documenting and updating policies and procedures for different compliances with the ability to identify and mitigate security risks.
• Strong communication skills to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work independently and in a team environment, managing multiple priorities and deadlines.
• Conduct internal Audits and maintaining the security posture.

Roles And Responsibilities

• Conduct risk assessments and vulnerability assessments to identify potential security risks and develop mitigation strategies.
• Provide guidance and support to cross-functional teams to ensure effective implementation of security controls and practices.
• Monitor and analyze security-related incidents, conduct investigations, and contribute to incident response efforts.
• Stay up-to-date with the latest industry trends, regulatory changes, and emerging best practices in ISO 27001 and SOC2 compliance.

Qualifications and Skills

• Bachelor s degree in Computer Science, Information Technology, or a related field.

Disclaimer: This job description has been sourced from a public domain and may have been modified by Naukri.com to improve clarity for our users. We encourage job seekers to verify all details directly with the employer via their official channels before applying.