Protiviti India
Manager - Cyber Security Consulting / GRC & Security Assessments
- Compensation
- Not disclosed
- Location
- Mumbai; Navi Mumbai; Mumbai (All Areas)
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's Degree in Computer Science, Information Security, Information Technology, or related discipline.
- Minimum 5 years of experience in Cyber Security Consulting, IT Risk, Information Security, GRC, or Compliance Assessments.
- Strong hands-on experience with ISO 27001/27002, ISO 27701, NIST CSF, CSA, ITGC, COBIT, COSO, and regulatory compliance assessments.
- Good understanding of Vulnerability Assessment & Penetration Testing (VAPT).
- Strong knowledge of Cloud Security, Cyber Risks, Network Security, Application Security, and Data Security.
- Experience with security technologies including IAM, Firewalls, Proxies, DLP, Endpoint Protection, and Web Filtering solutions.
- Understanding of Cloud Computing, Database Management Systems, Application Controls, and SDLC security practices.
- Proven experience delivering solutions and presenting findings to executive stakeholders and Board-level audiences.
- Strong stakeholder management, leadership, communication, and consulting skills.
Nice to have
- Consulting Firms / Big 4 Consulting experience preferred.
- Strong technical cybersecurity background with exposure to Network, Infrastructure, Cloud, and Security Architecture domains.
- Experience managing client-facing cybersecurity and risk advisory engagements.
Full description
Job Title
Manager - Cyber Security Consulting / GRC & Security Assessments
Location - Mumbai - Sion (Work From Office)
Experience - 5+ Years
Shift - General Shift
Notice Period - Immediate Joiners to 30 Days
Job Summary
We are seeking an experienced Cyber Security Manager with a strong technical foundation and consulting background to lead cybersecurity assessment and assurance engagements. The ideal candidate should possess hands-on expertise across information security frameworks, cloud and network security, risk assessments, security controls evaluation, and regulatory compliance reviews. The role requires interaction with senior leadership, CXOs, and Board members while delivering practical, business-focused cybersecurity solutions.
Key Responsibilities
- Lead and execute Information Security, Cybersecurity, Privacy, and Compliance Assessments.
- Conduct Security Control Assessments, Control Validation, Control Testing, Gap Assessments, and Gap Validation activities.
- Perform reviews against industry standards and frameworks including:
- ISO 27001/27002
- ISO 27701
- NIST Cyber Security Framework (CSF)
- CSA
- PCI DSS
- COBIT
- COSO 2013
- IT General Controls (ITGC)
- Assess security controls across Cloud, Network, Infrastructure, Applications, IAM, Endpoint Security, and Data Security environments.
- Review cybersecurity governance, risk management, and compliance programs.
- Support Business Impact Assessments and Cyber Risk Assessments.
- Evaluate security controls related to:
- Identity & Access Management (IAM)
- Network & Infrastructure Security
- Application Security
- Cloud Security
- Data Loss Prevention (DLP)
- Endpoint Protection
- Firewalls & Proxy Technologies
- Secure SDLC
- Database Security
- Present assessment findings, risks, and remediation recommendations to Senior Management and Boards of Directors.
- Manage multiple client engagements and mentor junior team members.
Required Skills & Experience
- Bachelor's Degree in Computer Science, Information Security, Information Technology, or related discipline.
- Minimum 5 years of experience in Cyber Security Consulting, IT Risk, Information Security, GRC, or Compliance Assessments.
- Strong hands-on experience with ISO 27001/27002, ISO 27701, NIST CSF, CSA, ITGC, COBIT, COSO, and regulatory compliance assessments.