Information Security Engineer

Experience: 2-4 Years
Location: Bangalore

We are looking for a Cyber Security GRC Consultant to support Governance, Risk, Compliance (GRC), Privacy, and Business Continuity initiatives. The role involves working with internal teams and stakeholders to ensure compliance with security and privacy standards, manage audits, and improve the organization's security posture.

• Support Information Security, Privacy, and Business Continuity programs.
• Assist in ISO 27001, ISO 27701, ISO 22301, SOC 2, HITRUST, GDPR, and regulatory compliance activities.
• Conduct Privacy Impact Assessments (PIA/DPIA) and drive remediation of identified risks.
• Support Third-Party Risk Management (TPRM) and security governance initiatives.
• Develop and maintain security policies, procedures, and guidelines.
• Review security questionnaires, RFPs, contracts, DPAs, and privacy addendums.
• Work with stakeholders to ensure compliance with data protection laws such as GDPR, DPDP, and CCPA.
• Assist in business continuity and cyber resilience programs.
• Support audit preparation, reporting, metrics, and security council activities.
• Promote information security and privacy awareness across the organization.

• 2-4 years of experience in Information Security, GRC, Privacy, or Compliance.
• Knowledge of frameworks and standards such as:
  • ISO 27001, ISO 27701, ISO 22301
  • NIST CSF, NIST 800-53
  • PCI DSS, HIPAA, SOC 1/SOC 2, SOX
• Understanding of privacy regulations such as GDPR, DPDP, and CCPA.
• Experience with GRC tools like OneTrust, RSA Archer, or RSAM.
• Basic knowledge of cloud security controls in Azure, AWS, or GCP.
• Strong analytical, communication, and stakeholder management skills.

• Bachelor's degree in Engineering or equivalent.
• Preferred certifications:
  • CISSP, CISM, CISA, CRISC
  • CIPP, CIPM, CDPSE
  • ISO 27001/27701/22301 Lead Implementer or Auditor

• Strong attention to detail.
• Good problem-solving and analytical skills.
• Self-motivated and eager to learn.
• Positive attitude and ability to work collaboratively.