Qureos Mentor

Matayo AI Solution Pvt Ltd

Matayo AI Solutions Pvt Ltd (Matayo 360&deg; GRC Service Division) is looking for a passionate GRC Consultant to join our fast-growing compliance advisory team.If you live and breathe ISO 27001, SOC 2, PCI DSS can think like an auditor, and love solving risk management puzzles &mdash; we want to meet you!Position: GRC ConsultantLocation: Hybrid (Bangalore/ Remote &ndash; India)Experience: 1&ndash;2 Years in GRC / ISO 27001 ImplementationQualification: ISO 27001 Lead Implementer or Lead Auditor (Mandatory)CTC: 4,50,000 PA to 6,00,000 PAKey Skills Required:<ul><li>Hands-on experience in implementing and auditing ISO/IEC 27001:2022</li><li>Familiarity with ISO 31000 Risk Management principles</li><li>Understanding of Annex A controls and Statement of Applicability (SoA)</li><li>Experience conducting Internal Audits, Risk Assessments, and GAP Analysis</li><li>Documentation skills &mdash; policies, procedures, risk registers, audit checklists</li><li>Exposure to SOC 2 readiness, GDPR, or DPDPA (added advantage)</li><li>Excellent written and verbal communication skills</li></ul>Roles &amp; Responsibilities:Governance &amp; Compliance<ul><li>Assist clients in implementing ISO 27001:2022 ISMS framework, including defining scope, policy documentation, control implementation, and management review.</li><li>Conduct GAP assessments and prepare SoA and Risk Treatment Plans.</li><li>Align controls with frameworks like SOC 2, PCI DSS, HIPAA, and GDPR as needed.</li></ul>Risk Management<ul><li>Perform risk identification, analysis, and evaluation in line with ISO 31000.</li><li>Develop and maintain Risk Register using impact&ndash;likelihood matrices.</li><li>Recommend and track risk treatment plans and mitigation actions.</li></ul>Internal Audit &amp; Assurance<ul><li>Plan and execute Internal Audits based on ISO 27001:2022 Annex A controls.</li><li>Collect and review evidence from business, IT, and HR departments.</li><li>Prepare audit reports, NC (Nonconformity) logs, and CAPA (Corrective Action) tracking.</li><li>Support clients in external certification audits with CBs.</li></ul>Documentation &amp; Reporting<ul><li>Draft and maintain compliance documents: ISMS Manual, Policies, Procedures, Risk Register, SoA, and Audit Checklists.</li><li>Prepare MIS dashboards, compliance status reports, and management review summaries.</li></ul>Client Engagement &amp; Delivery<ul><li>Support end-to-end GRC project execution &mdash; from scoping to closure.</li><li>Coordinate with cross-functional teams and external auditors.</li><li>Deliver presentations and training to clients on ISMS and Risk Management concepts.</li></ul>Project Exposure:<ul><li>Should have successfully executed at least two (2) complete ISO 27001 or integrated GRC implementation projects (from GAP to certification stage).</li></ul>Soft Skills:<ul><li>Strong analytical, problem-solving, and documentation capabilities</li><li>Ability to manage multiple client projects simultaneously</li><li>High integrity, confidentiality, and attention to detail</li></ul>Career Path:<ul><li>Growth into Senior GRC Consultant / vCISO Track within 2&ndash;3 years</li><li>Exposure to global frameworks &ndash; SOC 2, PCI DSS, HITRUST, ISO 42001 (AI Governance), NIST</li></ul>Compensation:Competitive salary based on experience and certification level<ul><li>performance-based incentives per project completion</li></ul>How to Apply:<ul><li>Send your resume and certification copies to</li></ul>admin_hr@matayo-ai.comJob Type: Full-timeApplication Question(s):<ul><li>How soon can you join if shortlisted? (No. of Days)</li><li>Do you have experience? Are you familiar with ISO 31000 Risk Management framework and risk scoring methods (Impact &times; Likelihood)? preparing Risk Registers, SoA, or Audit Checklists? (Yes or No)</li><li>Have you worked on Internal Audit planning, execution, and CAPA tracking? (Yes or No)</li><li>Have you completed ISO 27001:2022 Lead Implementer or Lead Auditor certification? (Yes or No)</li><li>How many ISO 27001 projects have you personally executed (implementation or audit)? (Number of Projects)</li><li>Do you have the following license or certification: Lead Auditor? (Yes or No)</li><li>Have you worked with other frameworks like SOC 2, GDPR, or PCI DSS (optional but preferred)? (Yes or No)</li></ul>Work Location: In person

GRC Consultant

Join Matayo AI Solution Pvt Ltd and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Matayo AI Solution Pvt Ltd

ABOUT_COMPANY

GRC Consultant