Cybersecurity GRC Consultant
MumbaiFull-time5–9 yrs12 L–₹18 L a yearPosted over a month ago
Senior cybersecurity role at SISA Information Security in Mumbai. Needs 5+ years. Pays ₹12–18 LPA.
About the role
We are looking for a hands-on Cybersecurity GRC Consultant with strong experience in CMMC, FedRAMP, NIST, SOC 2, ISO 27001 and/or HITRUST to lead and deliver cybersecurity compliance and advisory engagements. The role requires practical experience in control assessment, framework mapping, evidence validation, gap assessment, risk analysis, remediation advisory and audit/report delivery.
What you'll do
- Lead end-to-end cybersecurity GRC and compliance engagements, including scoping, planning, assessment, evidence review, gap analysis
- Perform assessments against CMMC 2.0, FedRAMP, NIST SP 800-171, NIST SP 800-53, ISO 27001, SOC 2 and HITRUST CSF, based on client requirements
- Develop and maintain control mappings and crosswalks across CMMC, FedRAMP, NIST, ISO 27001, SOC 2 and HITRUST
- Conduct detailed control design and operating effectiveness assessments, including review of policies, procedures, configurations, records and other audit evidence
- Evaluate control gaps, determine risk and impact, and develop practical remediation recommendations
What you need
- Network security
- Vulnerability assessment
- Incident response
- ISO 27001
- Cloud security
- IAM
Good to have
- CISSP
- CISA
- CISM