GRC Consultant

← Back to all jobs

GRC Consultant

Applications Closed
DepartmentGovernance, Risk & Compliance (GRC)
LocationGurugram (Hybrid)
Job TypeFull Time
Experience2–5 Years

Job Overview

Aegis Compliance Tech Pvt. Ltd. is seeking a GRC Consultant with 2–5 years of relevant experience to support governance frameworks, risk assessments, compliance reviews, policy development, and audit readiness. The ideal candidate should have a strong understanding of GRC principles, regulatory compliance, risk management, and information security practices.

About the Role

Aegis Compliance Tech Pvt. Ltd. is looking for a detail-oriented GRC Consultant to support organizations in strengthening their governance, risk management, and regulatory compliance practices.

The successful candidate will assist in conducting risk assessments, evaluating compliance requirements, reviewing policies and internal controls, supporting audit readiness, and preparing documentation and reports. The role also offers exposure to information security and data privacy compliance engagements.

We are looking for someone with strong analytical, documentation, communication, and problem-solving skills who can collaborate effectively with internal teams and clients.

Key Responsibilities

  • Conduct governance, risk, and compliance assessments to identify gaps and improvement opportunities.
  • Identify, evaluate, document, and track business, operational, regulatory, and information security risks.
  • Assist in developing and reviewing policies, procedures, Standard Operating Procedures (SOPs), and internal control documentation.
  • Support compliance gap assessments against applicable regulatory requirements and industry frameworks.
  • Assist with ISO 27001, ISO 27701, SOC 2, NIST, or similar framework-related assignments, as applicable to client engagements.
  • Support internal and external audits by coordinating evidence collection, maintaining documentation, and tracking corrective actions.
  • Prepare risk registers, compliance trackers, control matrices, assessment reports, and management presentations.
  • Collaborate with client stakeholders and internal teams to understand requirements and recommend practical remediation measures.
  • Support data privacy and information security compliance activities, including relevant documentation and assessments.
  • Monitor relevant regulatory and industry developments and help assess their implications for assigned projects.
  • Maintain accurate project records and ensure deliverables are completed within agreed timelines.

Requirements / Skills

  • Bachelor's degree in Law, Business Administration, Information Technology, Cybersecurity, Finance, or a related discipline.
  • 2–5 years of relevant experience in GRC, risk management, compliance, internal audit, information security, data privacy, or consulting.
  • Practical understanding of risk assessments, compliance reviews, internal controls, audit support, and policy documentation.
  • Familiarity with governance and compliance frameworks such as ISO 27001, ISO 27701, SOC 2, NIST, or COBIT.
  • Ability to identify compliance gaps, document findings, and recommend corrective actions.
  • Strong analytical, problem-solving, research, and documentation skills.
  • Good written and verbal communication skills, including the ability to interact professionally with clients.
  • Proficiency in Microsoft Word, Excel, PowerPoint, and document management tools.
  • Ability to manage multiple assignments, meet deadlines, and work effectively in a hybrid environment.

Preferred Qualifications

  • Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, CISM, CRISC, CIA, or a recognized data privacy certification.
  • Knowledge of India's Digital Personal Data Protection Act, 2023, and applicable data protection requirements.
  • Experience working with GRC consulting firms, compliance advisory teams, audit teams, or information security functions.
  • Exposure to risk registers, control assessment matrices, compliance evidence, and remediation tracking.
  • Experience supporting clients across technology, financial services, consulting, or other regulated industries.
  • Ability to translate regulatory and framework requirements into practical business processes.

Skills & Competencies

  • Governance, Risk & Compliance (GRC)
  • Risk Assessment and Risk Mitigation
  • Regulatory Compliance
  • Internal Controls and Audit Readiness
  • GRC Framework Implementation
  • Policy and SOP Documentation
  • ISO 27001 and ISO 27701 Awareness
  • Data Privacy and Compliance Awareness
  • Risk Register and Compliance Gap Analysis
  • Analytical and Problem-Solving Skills
  • Research and Documentation
  • Client Communication and Stakeholder Management
  • Microsoft Excel, Word, and PowerPoint
  • Project Coordination and Time Management

Benefits

  • Opportunity to work on governance, risk, compliance, and data privacy assignments.
  • Professional learning and development opportunities.
  • Exposure to industry frameworks and real-world compliance challenges.
  • Collaborative work environment with opportunities to develop consulting skills.
  • Compensation aligned with relevant experience and demonstrated skills.
  • Additional benefits, leave, insurance, and other employment provisions as per company policy.

About the Company

Aegis Compliance Tech Pvt. Ltd. helps organizations strengthen governance, manage business and compliance risks, and improve their regulatory compliance practices. Our areas of focus include Governance, Risk & Compliance (GRC), information security, regulatory advisory, and data privacy compliance.

We aim to help businesses establish structured compliance processes, improve internal controls, identify potential risks, and build sustainable compliance practices.

Interview Process

  • Initial HR screening and discussion.
  • Assessment of GRC knowledge, experience, and relevant skills.
  • Technical discussion or scenario-based assessment, where applicable.
  • Final discussion with the hiring team.
  • Reference checks and other pre-employment formalities, where applicable.