GRC Implementor (CISSP Certified)

CyberSigma Consulting Services is seeking an experienced 𝗚𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲, 𝗥𝗶𝘀𝗸, 𝗮𝗻𝗱 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 (𝗚𝗥𝗖) 𝗽𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗮𝗹 to join our cybersecurity team. If you have a strong background in risk management, compliance, security governance and cybersecurity frameworks, this opportunity could be the right fit for you. 𝗟𝗼𝗰𝗮𝘁𝗶𝗼𝗻: Noida / Mumbai /Pune(On-site) 𝗘𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲: 3+ Years 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗱: CISSP 𝗞𝗲𝘆 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗚𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 & 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 • Implement and maintain GRC programs and processes. • Develop security policies, standards, and procedures. • Conduct compliance assessments and gap analyses. • Support regulatory and industry compliance initiatives. 𝗥𝗶𝘀𝗸 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 • Perform enterprise and cybersecurity risk assessments. • Maintain risk registers and treatment plans. • Assess risks related to cloud, infrastructure, applications, and third parties. • Track remediation and risk mitigation activities. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗼𝗻𝘁𝗿𝗼𝗹 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 • Evaluate security control effectiveness and compliance maturity. • Support vulnerability management, access governance, and security monitoring initiatives. • Map security controls to business and regulatory requirements. 𝗔𝘂𝗱𝗶𝘁 & 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗦𝘂𝗽𝗽𝗼𝗿𝘁 • Coordinate internal and external audits. • Support evidence collection and audit readiness. • Track audit findings and corrective actions. • Assist with certification and attestation initiatives. 𝗦𝘁𝗮𝗸𝗲𝗵𝗼𝗹𝗱𝗲𝗿 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 • Work closely with IT, security, compliance, audit, legal, and business teams. • Lead workshops, risk reviews, and requirement-gathering sessions. • Provide guidance on governance, risk, and compliance best practices. 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗱 𝗤𝘂𝗮𝗹𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. • CISSP certification (Mandatory). • Additional certifications such as CISA, CRISC, or CISM are preferred. 𝗧𝗲𝗰𝗵𝗻𝗶𝗰𝗮𝗹 𝗦𝗸𝗶𝗹𝗹𝘀 • Strong knowledge of Security & Risk Management, Asset Security, Security Architecture, IAM, Security Operations, and Software Development Security. • Experience with risk management methodologies and compliance reporting. • Knowledge of AWS, Azure, and GCP security. • Familiarity with SIEM, IAM, DLP, EDR, and vulnerability management tools. 𝗣𝗿𝗲𝗳𝗲𝗿𝗿𝗲𝗱 𝗘𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲 • 3+ years of experience in cybersecurity, compliance, risk management, or GRC implementation. • Experience with ISO 27001, SOC 2, PCI DSS, and related compliance frameworks. • Consulting or enterprise-scale implementation experience is preferred. 𝗜𝗻𝘁𝗲𝗿𝗲𝘀𝘁𝗲𝗱 𝗰𝗮𝗻𝗱𝗶𝗱𝗮𝘁𝗲𝘀 can share their profile at hr@cybersigmacs.com