GRC Consultant (ISO 27001 / SOC 2) Jobs in Chennai Cyber Security Company

📋 Job Description

Jobzi is sourcing qualified candidates for GRC Consultant (ISO 27001 / SOC 2) positions in Chennai's private Cyber Security Company sector. This is a full-time opportunity with a reputed Cyber Security and Information Security employer in Chennai offering competitive salary, structured growth, and a professional work environment. Tamil communication skills are preferred alongside English for professional and business interaction in Chennai.

📌 Key Responsibilities

• Lead ISO 27001 implementation and certification projects for clients, covering gap assessment, ISMS design, control implementation, internal audit, and audit readiness.
• Manage SOC 2 Type II readiness and attestation engagements from trust criteria mapping through evidence collection, control testing, and auditor liaison.
• Conduct comprehensive information security risk assessments and develop risk treatment plans aligned to client business objectives and regulatory exposure.
• Advise clients on compliance with sector-specific regulations including RBI cyber security framework, SEBI guidelines, IRDAI requirements, and HIPAA for healthcare clients.
• Design and implement enterprise Information Security Management Systems (ISMS) including policy suites, control frameworks, and management review processes.
• Deliver client workshops, training sessions, and executive briefings on GRC programme maturity, emerging regulatory requirements, and security posture improvement.
• Manage multiple concurrent GRC consulting engagements, coordinating with client stakeholders, internal delivery teams, and certification body auditors to ensure on-time delivery.

🎓 Qualifications and Requirements

• B.E., B.Tech, MBA, or equivalent with three to eight years of GRC consulting or information security management experience in a professional services or security firm context.
• ISO 27001 Lead Auditor or Lead Implementer certification (PECB, BSI, or IRCA accredited) is required for senior GRC consultant roles at most Chennai security companies.
• CISM (Certified Information Security Manager) or CISA (Certified Information Systems Auditor) from ISACA is strongly preferred and often mandatory for senior consultant positions.
• Demonstrated track record of independently delivering ISO 27001 certification projects or SOC 2 Type II engagements with client-facing accountability.
• In-depth knowledge of information security risk management, ISMS design, and the practical implementation of ISO 27001 Annex A controls across diverse industry clients.
• Familiarity with sector regulations such as RBI Cyber Security Framework, SEBI CSCRF, IRDAI guidelines, PCI DSS, and HIPAA as applicable to Chennai client industries.
• Excellent client communication, project management, and consulting delivery skills with the ability to manage stakeholders from CISO level to operational IT teams.
• Good Tamil and English communication skills for team coordination and client interaction in Chennai.

✅ Required Skills