Cyber GRC Consultant – Program Delivery

We have an immediate opening for Cyber GRC Consultant – Program Delivery with our client.

If interested send me your CV to Arpitha.H@lancesoft.com

Duration: Initially 3 Months extendable up to 6 Months

(Minimum) 8–12 years in cybersecurity, governance, risk, and compliance roles, with at least 5 years owning control uplift, audit remediation, or regulatory programs through structured delivery.

Demonstrated track record of closing audit findings and meeting regulatory or board-mandated deadlines across concurrent, high-priority initiatives.

Proven experience owning the cyber GRC lifecycle end-to-end — control design, risk treatment, evidence, reporting, and benefits realization.

Deep working knowledge of cybersecurity, GRC, and IT control frameworks (ISO 27001, NIST CSF, COBIT, NESA, SOX, PCI-DSS, etc.) and how to operationalize them.

Experience running formal GRC governance forums (risk committees, control review boards, steering committees, audit forums) at senior leadership level.

Experience managing third-party risk and vendors, system integrators, and delivery partners against SOWs and SLAs.

Excellent written and verbal communication, with executive-level reporting and presentation skills.

Strong commercial awareness — budget management, forecasting, and variance analysis on GRC and remediation spend.

High personal accountability — comfortable owning regulatory outcomes and operating under tight, immovable deadlines.

Skilled at conflict resolution, negotiation, and risk-based decision-making in ambiguous, high-pressure environments.

Cybersecurity / GRC certifications (CISM, CISA, CRISC, CISSP, ISO 27001 LI/LA) strongly preferred.

PMP, PRINCE2, or equivalent program delivery certification.

If you like to proceed, please provide me below details with your CV for client submission.

Current location:

Interview availability: