Information Security Engineer

Job Details

Job Title: Consultant - Cyber Security GRC

Role Overview

Key Responsibilities

• Support Information Security, Privacy, and Business Continuity programs.
• Assist in ISO 27001, ISO 27701, ISO 22301, SOC 2, HITRUST, GDPR, and regulatory compliance activities.
• Conduct Privacy Impact Assessments (PIA/DPIA) and drive remediation of identified risks.
• Support Third-Party Risk Management (TPRM) and security governance initiatives.
• Develop and maintain security policies, procedures, and guidelines.
• Review security questionnaires, RFPs, contracts, DPAs, and privacy addendums.
• Work with stakeholders to ensure compliance with data protection laws such as GDPR, DPDP, and CCPA.
• Assist in business continuity and cyber resilience programs.
• Support audit preparation, reporting, metrics, and security council activities.
• Promote information security and privacy awareness across the organization.

Required Skills

• 2-4 years of experience in Information Security, GRC, Privacy, or Compliance.
• Knowledge of frameworks and standards such as: ISO 27001, ISO 27701, ISO 22301 NIST CSF, NIST 800-53 PCI DSS, HIPAA, SOC 1/SOC 2, SOX
• ISO 27001, ISO 27701, ISO 22301
• NIST CSF, NIST 800-53
• PCI DSS, HIPAA, SOC 1/SOC 2, SOX
• Understanding of privacy regulations such as GDPR, DPDP, and CCPA.
• Experience with GRC tools like OneTrust, RSA Archer, or RSAM.
• Basic knowledge of cloud security controls in Azure, AWS, or GCP.
• Strong analytical, communication, and stakeholder management skills.

Qualifications

• Bachelor's degree in Engineering or equivalent.
• Preferred certifications: CISSP, CISM, CISA, CRISC CIPP, CIPM, CDPSE ISO 27001/27701/22301 Lead Implementer or Auditor
• CISSP, CISM, CISA, CRISC
• CIPP, CIPM, CDPSE
• ISO 27001/27701/22301 Lead Implementer or Auditor

Preferred Attributes