Cybersecurity GRC Consultant

About the role

We are looking for a hands-on Cybersecurity GRC Consultant with strong experience in CMMC, FedRAMP, NIST, SOC 2, ISO 27001 and/or HITRUST to lead and deliver cybersecurity compliance and advisory engagements. The role requires practical experience in control assessment, framework mapping, evidence validation, gap assessment, risk analysis, remediation advisory and audit/report delivery.

What you'll do

• Lead end-to-end cybersecurity GRC and compliance engagements, including scoping, planning, assessment, evidence review, gap analysis
• Perform assessments against CMMC 2.0, FedRAMP, NIST SP 800-171, NIST SP 800-53, ISO 27001, SOC 2 and HITRUST CSF, based on client requirements
• Develop and maintain control mappings and crosswalks across CMMC, FedRAMP, NIST, ISO 27001, SOC 2 and HITRUST
• Conduct detailed control design and operating effectiveness assessments, including review of policies, procedures, configurations, records and other audit evidence
• Evaluate control gaps, determine risk and impact, and develop practical remediation recommendations

What you need

• 5–9 yrs of experience
• Network security
• Vulnerability assessment
• Incident response
• ISO 27001
• Cloud security
• IAM
• Any graduate

Good to have

• CISSP
• CISA
• CISM

What you get

• ₹12 L–₹18 L a year