GRC – Lead Auditor

Position: GRC – Lead Auditor Experience: 2–5 Years Location: Mumbai Job Summary We are looking for a skilled GRC – ISO 27001 Lead Auditor with 2–5 years of experience in Governance, Risk, and Compliance (GRC), IT security audits, and information security standards. Key Responsibilities Develop and implement information security and compliance strategies, and track the status of IT security audit recommendations. Prepare and maintain compliance documentation for ITGC, ISO 27001, ISO 27701, SOC 2, PCI DSS, GDPR, NIST, and other applicable regulatory frameworks. Lead internal audits, conduct self-assessments, and coordinate third-party risk assessments covering IT infrastructure, operational processes, and security controls. Conduct scheduled and targeted IT compliance audits for clients across sectors, including Banking/NBFC, Power, IT, Manufacturing, and Services. Develop and deliver information security awareness and training programs. Map various IT, information security, and cybersecurity standards to integrated compliance frameworks and risk assessment processes. Identify compliance gaps, recommend corrective actions, and monitor remediation activities to ensure adherence to applicable standards and regulations. Required Skills Hands-on experience in GRC, IT audits, and information security compliance. Knowledge of ISO 27001 and ISO 27701, ITGC, SOC 2, PCI DSS, GDPR, and NIST frameworks. Experience in internal auditing, risk assessment, control testing, and compliance documentation. Strong analytical, documentation, communication, and stakeholder management skills. Candidate Preference Candidates with relevant ISO 27001 Lead Auditor experience or certification will be preferred. Mumbai-based candidates only