GRC Consultant - IT Risk & Audit

Job Title : GRC Consultant (SOC 1, SOC 2, Audit, Compliance) Location : Bengaluru (Remote Opportunity) Experience : 8 years Immediate Joiners Job Description : We are seeking an experienced GRC (Governance, Risk, and Compliance) Consultant with a strong background in the IT field, specifically with hands-on experience in SOC 1 and SOC 2 projects. The ideal candidate should have a solid understanding of audit, compliance, and internal controls, and will be working in a consulting capacity for an immediate or 15-day notice period role. Key Responsibilities : - Lead governance, risk, and compliance-related assessments, ensuring compliance with industry standards and frameworks such as ISO 27001:2022, NIST 800, NIST CSF, PCI DSS, and HITRUST. - Perform gap analysis, identify security risks, and provide actionable recommendations for compliance improvement. - Drive risk methodology development and execution, updating and mapping GRC assessments to changing requirements for SOC 1 and SOC 2. - Act as the key liaison between internal teams and external audit resources, government regulators, and external customers to ensure readiness for audits and compliance. - Work collaboratively with business units to assist in understanding internal controls, address business drivers, and prepare for future audits. - Support business units in managing technology risks, data security, and vendor relationships, ensuring alignment with GRC within the Enterprise Risk Management (ERM) model. - Provide guidance on change management and internal control identification and measurement per applicable guidelines. - Promote a positive, performance-driven culture while supporting business growth and compliance initiatives. - Manage the coordination, tracking, and reporting on divisional and business unit risk metrics and results. Qualifications : - Minimum 8 years of experience in IT, with a strong focus on Governance, Risk, and Compliance. - Expertise in SOC 1 and SOC 2 audits and compliance. - Proven experience with ISO 27001:2022, NIST 800, NIST CSF, PCI DSS, and HITRUST frameworks. - Prior experience working in a consulting capacity, with the ability to work across matrix business environments. - Excellent communication and stakeholder management skills. - Ability to work independently with minimal supervision in a remote setting. - Immediate or 15-day notice period preferred. (ref:hirist.tech)

Location: in, IN

Posted Date: 3/10/2025