GRC Consultant - Audit and Compliance

About QuassrCyberTech

QuassrCyberTech is an IT services and cybersecurity consulting and engineering company that helps organizations protect their digital infrastructure, manage cyber risks, meet regulatory requirements, and strengthen their security posture.

We are looking for a hands-on GRC Consultant with experience in cybersecurity audits, regulatory compliance, risk assessments, and client-facing consulting. The ideal candidate should be capable of independently managing audit workstreams, interacting with client stakeholders, and delivering high-quality, audit-ready documentation.

Key Responsibilities

1. Regulatory & Compliance Audits

• Conduct cybersecurity audits and gap assessments for banks, NBFCs, fintech companies, insurers, and technology organisations.
• Work on RBI cybersecurity requirements, UIDAI Aadhaar security requirements, and IRDAI cybersecurity guidelines.
• Perform ISO/IEC 27001 assessments, internal audits, and certification readiness activities.
• Support ISO/IEC 42001 AI Management System readiness and SOC 1/SOC 2 Type I and Type II engagements.
• Assist with DPDP Act 2023 and GDPR privacy assessments, where applicable.

2. Audit & Client Engagement Management

• Manage audit activities from scoping and kickoff through fieldwork, reporting, and closure.
• Coordinate with client IT, security, compliance, and business teams.
• Collect and review evidence, test controls, document findings, and track remediation.
• Prepare audit reports, executive summaries, and actionable recommendations.

3. Risk Management & Governance

• Conduct risk assessments and maintain risk registers.
• Perform third-party/vendor risk assessments and security due diligence.
• Review IAM processes, privileged access,segregation of duties, and user access reviews.
• Review cloud security configurations, logging, encryption, and network segmentation.
• Draft and update information security policies, standards, procedures, and SOPs.

4. Compliance Automation & Privacy

• Have knowledge on compliance automation of platforms such as Vanta, Drata, or Sprinto.
• Assist with control mapping, evidence automation, and continuous compliance monitoring.
• Conduct Privacy Impact Assessments (PIAs)and Data Protection Impact Assessments (DPIAs), where applicable.

Required Qualifications & Skills

• 2.5 - 3.5 years of experience in GRC, IT audit, along with cybersecurity consulting.
• Hands-on exposure to client-facing audits and compliance engagements.
• Experience with banking-sector cybersecurity audits and regulatory requirements.
• Practical exposure to RBI, UIDAI, IRDAI, and ISO/IEC 27001 assessments.
• Understanding of SOC 1/SOC 2, ISO/IEC 42001, risk management, and privacy compliance.
• Working knowledge of TPRM, IAM, cloud security, and information security policies amd cyber security concepts
• Strong documentation, analytical, communication, and stakeholder-management skills.
• Bachelor's degree in Computer Science, IT, Engineering, or a related discipline.

Preferred Certifications

• ISO/IEC 27001 Lead Auditor or Lead Implementer
• ISO/IEC 42001 Lead Auditor
• CISA, CRISC, ISC2 CC, CDPSE

Knowledge of PCI DSS, NIST CSF, SEBI CSCRF, and proficiency in English, Hindi and Marathi will be an added advantage.

What Were Looking For

• Ability to independently manage client engagements and deliverables.
• Strong ownership, attention to detail, and problem-solving skills.
• Confidence in interacting with CISOs, auditors, and business stakeholders.
• Willingness to learn evolving cybersecurity regulations and frameworks.
• Ability to manage multiple engagements and meet deadlines.

Location & Travel Requirements

• Willingness to relocate to Nashik, Maharashtra.
• Willingness to travel frequently to client locations across India.
• Flexibility to support onsite assignments and audit deadlines.

What We Offer

• End-to-end ownership of cybersecurity GRC engagements.
• Exposure to BFSI, fintech, and technology-sector clients.
• Opportunities to work on AI governance and compliance automation.
• Sponsored certifications and structured learning opportunities.
• Competitive compensation, travel allowances, and performance-linked growth.