GRC Consultant – Immediate Hiring

About the role

This position focuses on information security management and regulatory compliance within large‑scale cloud environments. The consultant will refine risk‑management strategies, identify architectural gaps, and drive remediation to protect critical assets.

Key responsibilities

• Develop and execute risk assessments for security and technology risks.
• Identify gaps in controls, processes, and architectural designs and propose remediation solutions.
• Perform threat modeling, data‑flow analysis, and assess deviations from security standards.
• Create and maintain risk dashboards, reporting, and automated risk‑scoring mechanisms.
• Oversee risk‑management tools and continuously improve the GRC program.
• Provide subject‑matter expertise on security risk, compliance frameworks, and control environments.

Required profile

• Bachelor’s degree in MIS, Computer Science, or related field (or equivalent experience).
• 3–6 years of experience in information security, audit, risk management, compliance, or consulting.
• Strong written and verbal communication skills with the ability to influence stakeholders.
• Proven ability to work independently, travel up to 50% of the time, and deliver results with minimal supervision.
• Leadership‑level communication and a high sense of ownership.

Required skills

• Risk assessments
• Automated risk scoring
• CISA certification
• IT‑Risk frameworks (NIST, ISO‑27X)
• Threat modeling
• Risk management strategies
• Business and regulatory compliance
• IT‑GRC tools
• Cloud services
• Information security management
• Security compliance