KPMG India

Governance Risk and Compliance - Consultant

Bengaluru · Mid Level

Recently posted - highest visibilityVerified listingPosted 2h ago

Applicants who checked fit first are 3.1× more likely to hear back

What we know about this role

Hiring pulse

HIGH

KPMG India is actively reviewing profiles and moving candidates through the pipeline right now.

Apply window

First 72 hours

Still inside it - posted 2h ago

Early applicants get seen before the pile builds.

Not a repost

The first time we've seen this listing - it hasn't been closed and reopened.

Skills required

3 listed

Information Security Management SystemsEvidence CollectionAudit Management

You almost certainly match several of these already. Unlock your skill map to see the matches, the gaps, and what to fix first.

Job description

•As a GRC Analyst supporting the ISO 27001 program, you will help maintain and enhance the organization's Information Security Management System (ISMS).

•Responsibilities include performing control assessments and testing, supporting ISO 27001 audits and certification activities, monitoring compliance with ISO 27001 requirements, managing audit findings and remediation actions, maintaining ISMS documentation, and tracking program readiness to strengthen the organization's security and compliance posture.

•Support the implementation, maintenance, and continual improvement of the ISO 27001 Information Security Management System (ISMS).

•Conduct risk assessments for systems, applications, and third-party vendors in alignment with ISO 27001 and NIST CSF.

•Perform control assessments and testing to evaluate the effectiveness of security controls and recommend remediation actions.

•Conduct gap assessments and compliance reviews against ISO 27001 requirements and related security frameworks.

•Support ISO 27001 certification, surveillance audits, and audit readiness activities.

•Coordinate internal and external audits, including evidence collection and tracking of corrective actions.

•Maintain risk registers, policies, procedures, and other ISMS documentation.

•Monitor and track audit findings, risks, issues, and remediation plans through closure.

•Collaborate with business, IT, security, and compliance teams to ensure adherence to ISO 27001 requirements.

•Facilitate management reviews, governance meetings, and compliance reporting.

•Utilize IRM modules, including Risk, Policy & Compliance, Audit, and Issue Management, to support program operations.

•Added advantage: Experience working with ServiceNow IRM modulesble.

Work experience

•Good years of experience in Governance, Risk & Compliance (GRC), Information Security.

•Relevant years of experience managing ISO certification programs.

•Strong understanding of ISO 27001 standard.

•Experience with risk assessments, control frameworks, and audit management.

•Excellent stakeholder management, communication, and project management skills.

Strong client interaction skills, both written and verbal
Highly Fluent in English – verbal and written
Critical thinking, including questioning, digestion, thought process, and documentation of same.
Acute attention to detail.
Exceptional time management, including speed and ownership to drive closure and seek solutions.
Ability to effectively manage competing priorities.

Additional Qualification:

•Prior consulting experience with big 4 or large clientele is preferable.
•ISO27001-LA/LI, CISA, CRISC or CISSP is preferrable

More Security Engineer roles in Bengaluru

See all

Sr Network Engineer/ Lead Network Engineer | Fulltime | Jp Nagar, Bangalore

Two95 International Inc. · Bengaluru

Information Security Manager | JP Nagar, Bangalore | Fulltime

Two95 International Inc. · Bengaluru

Information Security Engineer (Generalist - AI & Automation Focus)

Two95 International Inc. · Bengaluru

Security Consultant - Red Team

Payatu · Bengaluru

Keep browsing

All open roles at KPMG India All Security Engineer jobs in Bengaluru

Governance Risk and Compliance - Consultant

What we know about this role

Skills required

Job description

Get tomorrow's jobs before you have to search

Someone shared one job with you. ASAI keeps finding the rest.