Description :

Job Title : GRC Consultant

Company : Pentabay Software

Location : Anna Salai, Mount Road (Chennai)

Employment Type : Full-Time (Work from Office)

Experience : 1-7 Years

Job Overview :

We are seeking a skilled GRC (Governance, Risk & Compliance) Consultant who will be responsible for supporting risk management, compliance assessments, IT security audits, and policy implementation.

The ideal candidate must have experience working with at least one cloud platform (AWS, Azure, or GCP) and strong understanding of security and privacy frameworks.

Key Responsibilities :

- Conduct risk assessments and compliance checks across IT systems and business processes.

- Implement, monitor, and enhance governance, risk, and compliance frameworks.

- Perform internal audits aligned to ISO 27001, HIPAA, GDPR, and other regulatory standards.

- Assist in developing and maintaining security policies, SOPs, and documentation.

- Support security awareness training and compliance reporting.

- Collaborate with cross-functional teams to identify security gaps and recommend remediation action.

- Coordinate and assist during external audits and certification processes.

- Monitor and maintain compliance dashboards, audit logs, and evidence records.

Required Skills & Qualifications :

- 1-7 years of experience in GRC / Information Security / Compliance / Risk Management.

- Strong experience with at least one public cloud platform :

1. AWS or Azure or GCP.

- Good knowledge of industry standards such as : . ISO 27001, HIPAA, GDPR, NIST, SOC2, etc.

- Strong understanding of security controls, vulnerability management, and data protection frameworks.

- Ability to prepare and manage documentation, audit evidence, and policy frameworks.

- Excellent communication, reporting, and stakeholder coordination skills.

Preferred Certifications (Not Mandatory) :

- ISO 27001 Lead Auditor / Lead Implementer

- CISA / CISM / CRISC

- AWS/Azure/GCP Security Certifications

Why Join Pentabay Software ?

- Opportunity to work on enterprise security compliance projects.

- Growth-oriented work environment.

- Exposure to global clients and security standards.