GRC Consultant

Key Responsibilities

- Lead the implementation and management of ISO 27001 ISMS lifecycle processes including audit readiness and governance frameworks.
- Coordinate the development and operationalization of ISO 42001 standards for AI governance, ensuring risk assessments and controls are in place.
- Conduct thorough third-party and vendor risk assessments, ensuring compliance with security evaluations and performance of periodic vendor reviews.
- Drive GDPR and DPDPA compliance initiatives, supporting privacy impact assessments and related documentation.
- Manage and update the enterprise risk register, overseeing risk acceptance, exception workflows, and remediation tracking.
- Develop and deliver comprehensive reports on ISMS KPIs/KRIs to executive management.
- Facilitate cross-departmental collaboration as the central point of contact for InfoSec, Legal, Privacy, Procurement, and business teams.
- Provide ongoing support and guidance for risk and compliance operations, fostering a culture of continuous improvement.

Overview

- The GRC Consultant Specialist role is a critical position within the Cyber & Digital Risk team in Mumbai, focused on providing robust governance, risk, and compliance solutions within the BFSI sector.
- This specialist will actively engage with clients to implement governance frameworks that adhere to ISO 27001 and emerging standards such as ISO 42001 for AI Management System, ensuring compliance with regulatory requirements like GDPR and DPDPA.
- The position demands a proactive approach to managing enterprise risk registers, vendor risk assessments, and data privacy operations, ensuring that all compliance metrics and KPIs/KRIs are meticulously tracked and reported.
- This role requires close collaboration with cross-functional teams including Information Security, IT, Legal, and Procurement to drive compliance initiatives and foster a risk-aware culture.
- The successful candidate will leverage their 3 to 6 years of experience to provide expert guidance in GRC practices, contributing to the organization's risk management strategies and compliance posture.

Requirements

- 3 to 6 years of experience in governance, risk, and compliance roles within the BFSI sector, focusing on information security and compliance management.
- Demonstrated experience with ISO 27001 implementation and maintenance, including audit processes and governance structure setup.
- Proven knowledge of regulatory frameworks such as ISO 42001, GDPR, and DPDPA, with the ability to apply these standards effectively.
- Experience in managing risk registers, exception processes, and conducting third-party and vendor risk assessments.
- Proficiency in generating and analyzing ISMS KPI/KRI reports, coupled with strong stakeholder management and communication skills.
- Familiarity with GRC tools such as Sprinto, MetricStream, ServiceNow, or RSA Archer, enhancing compliance and risk management practices.