Information Security Consultant

Information Security Consultant – GRC (3+ Years Experience)

Pune / Pimpri-Chinchwad (On-site) | Full-Time

About SecMyIT Infosec Solutions

SecMyIT Infosec Solutions Pvt. Ltd. is a growing cybersecurity consulting firm specializing in Governance, Risk & Compliance (GRC), regulatory advisory, IT audits, and information security implementation. We work with regulated entities, high-growth startups, and IPO-bound organizations to design and strengthen cybersecurity governance aligned with ISO standards, RBI guidelines, and global best practices.

Our approach focuses on practical, risk-driven security solutions that go beyond compliance checklists and deliver measurable business value.

The Opportunity

We are looking for an experienced Information Security Consultant – GRC with at least 3 years of relevant experience who is comfortable working in a consulting environment and managing client-facing engagements.

This role offers the opportunity to work directly on ISO 27001 implementations, RBI cybersecurity framework assessments, regulatory compliance programs, and IPO-readiness engagements — providing strong exposure to real-world governance and risk challenges.

Key Responsibilities

- Lead or support ISO 27001 gap assessments, risk assessments, and ISMS implementation activities.
- Perform IT governance, risk, and compliance reviews aligned with industry frameworks and regulatory requirements.
- Participate in RBI Cyber Security Framework assessments and BFSI regulatory engagements.
- Conduct IT audits, internal control evaluations, and compliance assessments.
- Develop and review policies, procedures, risk registers, and governance documentation.
- Evaluate infrastructure security, access management controls, and operational security practices.
- Work directly with client stakeholders to identify risks and recommend remediation strategies.
- Prepare high-quality audit reports, risk summaries, and executive presentations.
- Stay updated with emerging cybersecurity threats and regulatory expectations.

Ideal Candidate Profile

- Minimum 3 years of experience in information security consulting, GRC, IT audit, or cybersecurity compliance roles.
- Hands-on exposure to ISO 27001 or similar security frameworks.

- Experience with RBI regulations, BFSI cybersecurity requirements, or regulated industry environments is highly preferred.
- Strong understanding of risk assessment methodologies and governance frameworks.
- Ability to manage client discussions and translate technical risks into business impact.
- Strong analytical thinking and documentation skills.

Qualifications

- Bachelor’s degree in Computer Science, Information Security, IT, or related field.
- Certifications such as ISO 27001 LA/LI, CISA, CISM, CRISC, or similar are advantageous.

Why Join SecMyIT

- Work on real consulting engagements with strong regulatory exposure.
- Opportunity to handle high-impact projects including ISO implementations and IPO readiness.
- Fast growth environment with high ownership and visibility.
- Collaborative team culture focused on continuous learning.