Senior Consultant - GRC at CBL - Crossbow Labs

, karnataka, India -

Full Time

Start Date

Immediate

Expiry Date

03 Apr, 26

Salary

0.0

Posted On

03 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ISO 27001, NIST Framework, GRC Practices, Risk Assessments, Cloud Environments, Team Management, Communication Skills, Documentation Skills, Presentation Skills, Security Awareness, Internal Audits, Compliance Checks, Information Security Management, Cybersecurity Principles, Training, Mentoring

Industry

Computer and Network Security

Description

· Lead and execute ISO 27001 implementation and audit projects, including risk assessments, gap analysis, and compliance checks. · Drive the implementation of NIST cybersecurity frameworks (e.g., NIST CSF, 800-53, 800-171) for clients across industries. · Provide strategic guidance on security best practices, governance, risk, and compliance (GRC) initiatives. · Perform internal audits and prepare clients for certification audits in alignment with ISO standards. · Create and maintain Information Security Management System (ISMS) documentation and support continual improvement processes. · Collaborate with cross-functional teams and manage end-to-end client engagements. · Mentor and lead a team of junior consultants; review deliverables and ensure timely project delivery. · Conduct security awareness sessions, training, and workshops for clients and internal stakeholders. · Stay updated on evolving threats, industry standards, and compliance regulations. · Should be open to travel and work at client premises as and when required by project or business demands is essential. Requirements · 5 to 8 years of professional experience in Information Security consulting. · Proven experience with ISO 27001 implementation & auditing. · Experience in NIST framework implementation and controls assessment. · Experience in auditing cloud environments across platforms such as AWS, Azure, or Google Cloud. · Strong understanding of GRC practices and cybersecurity principles. · ISO 27001:2013/2022 Lead Auditor Certification is mandatory. · Prior team management or leadership experience is required. · Excellent communication, documentation, and presentation skills. · Ability to work independently and manage multiple client engagements. · Exposure to other frameworks and standards like SOC 2, HIPAA, GDPR, PCI DSS is a plus. · Experience working with clients from BFSI, IT/ITES, or Healthcare sectors. · Additional certifications such as CISA, CISM, or CISSP are advantageous. Benefits · Competitive salary and benefits · Medical Insurance - Self & family · Parental Support - Maternity Leave · Retirement Benefits - PF Contribution · Opportunities for professional growth · Collaborative and inclusive work environment

Responsibilities

Lead and execute ISO 27001 implementation and audit projects while driving the implementation of NIST cybersecurity frameworks for clients. Collaborate with cross-functional teams, mentor junior consultants, and conduct security awareness sessions.