GRC – Lead Auditor

About the role

We are looking for a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in Governance, Risk, and Compliance (GRC), IT security audits, and information security standards.

What you'll do

• Develop and implement information security and compliance strategies, and track the status of IT security audit recommendations
• Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable regulatory frameworks
• Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments covering IT infrastructure, operational processes, and security controls
• Conduct scheduled and targeted IT compliance audits for clients across sectors, including Banking/NBFC, Power, IT, Manufacturing, and Services
• Develop and deliver information security awareness and training programs

What you need

• 2–5 yrs of experience
• Internal audit
• ISO 27001
• Compliance
• Audit
• Risk management
• Data privacy
• Any graduate

What you get

• ₹10 L a year