GRC Consultant – Compliance, Audit Readiness

This is a fully remote position, open to applicants in India.

📋 Description

• Take charge of the audit process for a designated portfolio of global clients, overseeing everything from gap assessment and readiness to external audit fieldwork, resolution of findings, and finalization.

• Evaluate security controls, cloud environments, organizational policies, and operational practices to pinpoint deficiencies.

• Collaborate with Engineering, IT, DevOps, and leadership teams to create practical, risk-based remediation plans.

• Review evidence for its relevance, completeness, and consistency prior to submission, and maintain an audit-ready documentation trail.

• Act as a liaison between clients and independent auditors, facilitating requests and clarifying control operations.

• Monitor evidence requests, dependencies, exceptions, and delivery risks; communicate updates and escalate any obstacles.

• Assist clients through SOC 2 Type I and Type II examinations and ISO/IEC 27001 audits, with exposure to ISO/IEC 27701, HIPAA, GDPR, and PCI DSS as applicable.

• Adapt to working across EU and US hours to support international clients and audit firms during critical engagement periods.

• Enhance reusable playbooks, evidence guidance, and audit workflows for the Central Audits Team.

⛳️ Requirements

• 2–5 years of pertinent experience in information security, IT audit, compliance consulting, or a similar customer-facing advisory role.

• Strong understanding of SOC 2 Type I and Type II and ISO/IEC 27001, encompassing control design, evidence expectations, readiness, and external audit processes.

• Hands-on experience in participating, coordinating, or supporting third-party security audits and addressing auditor inquiries or findings.

• Familiarity with AWS, GCP, or Azure; SaaS architectures; identity and access management; and technical control evaluation.

• Capability to differentiate between documentation gaps and control-design or operational effectiveness gaps, driving suitable remediation actions.

• Excellent written and verbal communication skills with technical teams, executives, clients, and external auditors.

• Strong organizational skills and follow-through across multiple parallel engagements and time-sensitive evidence requests.

• Willingness to work flexible hours across EU and US time zones.

• CISA, CISM, CISSP, ISO/IEC 27001 Lead Auditor or Lead Implementer, or a relevant privacy credential is a plus.

• Experience with a compliance automation platform, cybersecurity consultancy, or a rapidly scaling B2B SaaS company that serves international clients is advantageous.

🏝️ Benefits

• 100% remote work.

• Annual co-working allowance.

• USD 1,000 annual budget for learning and professional development.

• Unlimited leave.

• Health insurance coverage up to INR 10 lakh for the employee and family.

• Additional accident protection of INR 10 lakh.

• Life insurance valued at 3x the annual salary.

• INR 35,000 workspace setup allowance.