{"id":1806961,"url":"https://alion.io/job/payatu-security-consultant-grc","title":"Security Consultant GRC","company":{"id":95945,"name":"Payatu","domain":"payatu.com","url":"https://alion.io/company/payatu-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Freshteam","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":35000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CAPA","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-03T19:28:32Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-10-09T23:27:22Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Are you passionate about building resilient security programs? Do you think in frameworks, speak in controls, and dream in compliance matrices?\nIf yes, then Payatu is the place for you. We are always in search of passionate professionals to expand our renowned Bandit family. In our quest for GRC leaders, we're looking for individuals passionate about governance, risk management, and compliance to join our esteemed team. Here is an excellent opportunity we would like to share with you.\nWho we are?\n\nWe are a research-first cybersecurity firm driven by the mission of making the cyberworld safe for every organization, product, and individual. As India's leading offensive security consultancy, we bridge the gap between technical security and business assurance-helping clients across BFSI, manufacturing, healthcare, and technology sectors build robust, auditable, and compliant security programs aligned with global standards.\nYou are a perfect fit if you have:\n\n3-6 years of hands-on experience in GRC, compliance management, security audit, or quality assurance roles within cybersecurity or IT consulting environments\nBachelor's degree in Information Security, IT, Computer Science, Engineering, or related disciplines\nProven experience implementing and maintaining ISO/IEC 27001:2022 ISMS frameworks, including gap analysis, control implementation, and internal/external audit support\nStrong working knowledge of ISO/IEC 27001 Annex A controls and their practical application across diverse organizational contexts\nDemonstrated experience with ISO/IEC 17025 (Testing and Calibration Laboratories), ISO/IEC 17020 (Inspection Bodies), or ISO/IEC 17021-1 (Certification Bodies) frameworks-preferably in NABL/QCI/accreditation body contexts\nReal-world audit implementation experience -you've been on the ground during certification/accreditation cycles, not just supported from the sidelines\nHands-on proficiency managing risk registers, CAPA (Corrective and Preventive Action) logs, nonconformance reports (NCR), and internal audit evidence\nFamiliarity with regulatory compliance requirements such as DPDP Act 2023, RBI cybersecurity guidelines, SEBI IT framework, or sector-specific mandates\nStrong documentation skills and attention to detail in drafting policies, SOPs, control evidence, and audit-ready documentation\nAbility to interpret standards independently -you can read a framework document and translate it into actionable controls and evidence requirements\nSelf-driven learner with the curiosity and discipline to master new frameworks, regulations, and compliance requirements as business needs evolve\nYou have all our desired qualities if you have:\n\nProfessional certifications such as ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, ISO 9001 Lead Auditor, CISA, or other relevant Lead Implementer certifications (certifications will help streamline our filtering process, but real implementation experience matters most)\nExposure to or working knowledge of GDPR, CCPA, NIS Directive 2.0, SOC 2, PCI DSS, HIPAA, or NIST frameworks (we don't expect you to know them all; what matters is your ability to learn, interpret, and implement standards you haven't worked with before)\nExperience supporting CERT-In empanelment, NCIIPC/QCI audits, or NABL/ISO accreditation processes\nExposure to OT/ICS security standards (IEC 62443) or medical device cybersecurity (IEC 81001-5-1, FDA premarket guidance)\nFamiliarity with GRC platforms (e.g., Scrut, Sprinto,ServiceNow GRC, Archer, MetricStream) tools\nStrong communication skills with the ability to translate technical security findings into business risk language for leadership and clients\nWhat you'll do at Payatu:\n\nLead ISO 27001, ISO 27701, ISO 17025, ISO 17020, ISO 17021-1, and SOC 2, GDPR,DPDPA, implementation and audit readiness programs for clients and internal operations\nConduct gap assessments, control maturity evaluations, and compliance roadmaps aligned with client business objectives\nOwn and maintain risk registers, treatment plans, audit logs, and compliance dashboards\nSupport pre-sales and client engagement by scoping GRC projects, drafting compliance proposals, and presenting audit findings\nCollaborate with technical teams (VAPT, Red Team, IoT Security) to ensure security findings are contextualized within compliance frameworks\nPrepare and present evidence packages for external audits, certification renewals, and regulatory inspections\nStay current on evolving regulations, frameworks, and industry best practices in the Indian and global compliance landscape\nWhy Payatu?\n\nJoin a team that treats compliance not as a checklist, but as a strategic enabler. Work alongside India's top offensive security researchers while building frameworks that protect critical infrastructure, secure sensitive data, and empower clients to meet the highest assurance standards. Grow your expertise across diverse sectors, frameworks, and emerging regulations in one of India's most respected cybersecurity consulting firms.\nEqual Opportunity: Payatu is committed to creating an inclusive environment for all employees. We celebrate diversity and are committed to building a team that represents a variety of backgrounds, perspectives, and skills.","description_format":"text","description_chars":5228,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Security Compliance","IoT Security"],"lifecycle":[{"event":"open","at":"2026-10-03T19:28:32Z"}],"visa":[],"liveness":{"score":98,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.976,"p_room":1,"age_days":5,"expected_fill_days":33,"reasons":["conf:2","urgency","velocity","win:early"],"computed_at":"2026-10-09T06:01:00Z"},"pay":null,"html_url":"https://alion.io/job/payatu-security-consultant-grc","json_url":"https://alion.io/job/payatu-security-consultant-grc.json","meta":{"generated_at":"2026-10-10T00:18:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":454,"day_limit":5000,"remaining_today":4546,"minute_limit":60,"resets_at":"2026-10-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":95945},"rest":"https://alion.io/mcp/rest/get_company?id=95945"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpayatu-security-consultant-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpayatu-security-consultant-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpayatu-security-consultant-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/payatu-security-consultant-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpayatu-security-consultant-grc"}]}