Principal Governance Risk And Compliance Analyst

Job Description

GRC Consultant – Cyber Governance, Risk & Compliance

Location: Hyderabad, India | Experience: 12–15+ Years | Role Level: Principal Consultant / GRC Consultant

Role Summary

We are seeking an experienced Governance, Risk & Compliance (GRC) Consultant to lead enterprise cybersecurity governance, risk management, compliance, audit, and assurance initiatives. The role will drive the development and maturity of cyber governance frameworks, strengthen risk management practices, support regulatory and certification requirements, and provide strategic guidance to leadership on cyber risk and compliance matters.

Key Responsibilities

• Lead enterprise Cyber Governance, Risk Management, Compliance, and Assurance programs.
• Develop and maintain cybersecurity policies, standards, procedures, and control frameworks.
• Conduct enterprise risk assessments, cyber risk analysis, and risk treatment planning.
• Drive implementation and continuous improvement of governance and control frameworks.
• Support internal and external audits, regulatory assessments, and certification initiatives.
• Establish risk and compliance reporting mechanisms for executive leadership and key stakeholders.
• Monitor compliance with industry regulations, contractual obligations, and security standards.
• Partner with technology, security, legal, privacy, and business teams to address risk and compliance requirements.
• Facilitate control testing, gap assessments, remediation tracking, and compliance reviews.
• Provide strategic guidance on cyber risk posture, governance priorities, and regulatory obligations.
• Lead third-party risk management, vendor assessments, and security due diligence activities.
• Mentor teams and promote a strong culture of governance, accountability, and risk awareness.
  
  
  

Required Qualifications

• 12–15+ years of experience in Cybersecurity Governance, Risk Management, Compliance, Audit, or related disciplines.
• Experience establishing, managing, or maturing enterprise GRC programs.
• Strong understanding of cybersecurity governance models, risk management methodologies, and compliance frameworks.
• Demonstrated experience supporting large-scale audits, certifications, and regulatory assessments.
• Experience developing policies, standards, control frameworks, and executive reporting dashboards.
• Strong knowledge of ISO 27001, NIST CSF, HITRUST CSF, SOC 2 Type II, HIPAA, and other industry frameworks.
• Experience conducting risk assessments, compliance reviews, and control effectiveness evaluations.
• Proven ability to influence and engage senior business and technology stakeholders.
• Strong consulting, leadership, communication, and stakeholder management skills.
• Experience managing cross-functional compliance and assurance initiatives.
  
  
  

Preferred Certifications

CISM, CRISC, CISA, ISO 27001 Lead Auditor / Lead Implementer, HITRUST CCSFP preferred, and CISSP preferred.

Key Competencies

Cyber Governance & Policy Management, Enterprise Risk Management, Regulatory Compliance & Audit Management, Security Control Frameworks, Third-Party Risk Management, Executive Reporting & Metrics, Assurance & Control Testing, Stakeholder Management & Consulting, Strategic Planning & Leadership, and Risk-Based Decision Making.

---