GRC Consultant
Payatu is looking for a GRC Consultant to join their offensive security team in Pune. The role focuses on building resilient security programs through framework alignment, risk management, and regulatory compliance. The ideal candidate has 3-6 years of experience in GRC, audit, and documentation within the cybersecurity sector. You will lead client implementation programs, conduct gap assessments, and translate complex compliance requirements into actionable security controls.
50k new jobs listed every day. Install TAL to find more jobs like this.
Experience
3-6 years
Function
Consulting
Work mode
Onsite, India
Company
Tier 2
What you will work on
Payatu is looking for a GRC Consultant to join their offensive security team in Pune. The role focuses on building resilient security programs through framework alignment, risk management, and regulatory compliance. The ideal candidate has 3-6 years of experience in GRC, audit, and documentation within the cybersecurity sector. You will lead client implementation programs, conduct gap assessments, and translate complex compliance requirements into actionable security controls.
TAL's take
Strong domain-specific consultancy role with clear responsibilities at a respected cybersecurity firm.
Very clear, structured JD detailing specific frameworks and responsibilities required for the consultant role.
Salaries at Payatu
26.0 LPA average
Based on 1 Grapevine salary entries for Payatu.
Other roles
4 - 6 years
26 LPA average
Range: 26 - 26 LPA
Must haves
- 3-6 years of experience in GRC or compliance
- Bachelor's degree in IT, CS, or related field
- Experience implementing ISO/IEC 27001:2022 ISMS
- Knowledge of ISO/IEC 27001 Annex A controls
- Audit implementation experience including CAPA and risk registers
- Understanding of Indian regulatory requirements like DPDP Act
Tools and skills
Nice to have: gdpr, ccpa, nis directive 2.0, soc 2, pci dss, hipaa, nist, iec 62443, iec 81001-5-1, scrut, sprinto, servicenow grc, archer, metricstream.
About the company
Reputable niche cybersecurity consultancy, well-known in Indian offensive security space but not a global/tier-1 tech giant.