Job description

Position: Information Security Consultant

Location: Bangalore

No. of Vacancies: 3

Shift: 1:30 PM to 10:30 PM

Workdays: Monday to Friday (Work from Office)

Experience: 4+ years

Qualification: BE/B.tech/Bsc/BCA/M.Tech/ME

Certification: ISO 27001:2022 Certified Lead Implementer/CISA/CISM (preferable)

Preferring Immediate Joiners

Job Summary:

We are looking for a skilled Information Security Consultant with extensive experience in IT audits, SOX testing, ITGC, and regulatory compliance, including ISO 27001, NIST, and PCI DSS. The ideal candidate will have expertise in risk assessments, Gap assessment, control testing, and ensuring compliance with industry standards.

Key Responsibilities:

• Audit & Compliance:
• Conduct external and internal IT audits following ISO 27001, SOX, and other regulatory frameworks.
• Perform IT General Controls (ITGC) assessments and ensure compliance with cybersecurity frameworks such as NIST 2.0, PCI DSS, and ISO 27001:2022.
• Identify control deficiencies and recommend corrective actions to improve security posture.
• Conduct Cyber Maturity Assessments and risk evaluations.
• Conducting GAP assessments.

• Client Engagement & Advisory:
• Act as a primary contact for client engagements, audit planning, and risk advisory services.
• Lead and facilitate client meetings, walkthroughs, and audit discussions.
• Provide strategic recommendations, develop security roadmaps, and present findings to senior stakeholders.

• Risk Management & Governance:
• Evaluate risk management practices and ensure mitigation of security vulnerabilities.
• Assist in the implementation of security best practices, policies, and frameworks.
• Manage third-party/vendor risk assessments and ensure compliance.

• Reporting & Documentation:
• Prepare audit reports, risk assessments, and compliance documentation.
• Develop and maintain Standard Operating Procedures (SOPs) for future audits.
• Track remediation progress and ensure implementation of security measures.

Technical Skills:

• Technical Expertise:
• Hands-on experience in SOX IT controls, ITGC, risk assessment, and compliance audits.
• Strong knowledge of ISO 27001, NIST CSF, PCI DSS, and other cybersecurity frameworks.
• Proficiency in security audits, control testing, and compliance management.

Competencies:

• Excellent communication and stakeholder management skills.
• Strong analytical and problem-solving abilities.
• Ability to work independently and manage multiple audit engagements.
• Exposure to multi-client audit engagements in GRC, IT Risk, and Cybersecurity frameworks.