Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 1572 days ago

Security Consultant GRC

Payatu10 open roles

Where
Pune, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Consultant GRCPayatu · Pune, India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Payatu's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 1572 days ago

The posting

Are you passionate about building resilient security programs? Do you think in frameworks, speak in controls, and dream in compliance matrices?

If yes, then Payatu is the place for you. We are always in search of passionate professionals to expand our renowned Bandit family. In our quest for GRC leaders, we're looking for individuals passionate about governance, risk management, and compliance to join our esteemed team. Here is an excellent opportunity we would like to share with you.

Who we are?

We are a research-first cybersecurity firm driven by the mission of making the cyberworld safe for every organization, product, and individual. As India's leading offensive security consultancy, we bridge the gap between technical security and business assurance—helping clients across BFSI, manufacturing, healthcare, and technology sectors build robust, auditable, and compliant security programs aligned with global standards.

You are a perfect fit if you have:

  • 3–6 years of hands-on experience in GRC, compliance management, security audit, or quality assurance roles within cybersecurity or IT consulting environments
  • Bachelor's degree in Information Security, IT, Computer Science, Engineering, or related disciplines
  • Proven experience implementing and maintaining ISO/IEC 27001:2022 ISMS frameworks, including gap analysis, control implementation, and internal/external audit support
  • Strong working knowledge of ISO/IEC 27001 Annex A controls and their practical application across diverse organizational contexts
  • Demonstrated experience with ISO/IEC 17025 (Testing and Calibration Laboratories), ISO/IEC 17020 (Inspection Bodies), or ISO/IEC 17021-1 (Certification Bodies) frameworks—preferably in NABL/QCI/accreditation body contexts
  • Real-world audit implementation experience—you've been on the ground during certification/accreditation cycles, not just supported from the sidelines
  • Hands-on proficiency managing risk registers, CAPA (Corrective and Preventive Action) logs, nonconformance reports (NCR), and internal audit evidence
  • Familiarity with regulatory compliance requirements such as DPDP Act 2023, RBI cybersecurity guidelines, SEBI IT framework, or sector-specific mandates
  • Strong documentation skills and attention to detail in drafting policies, SOPs, control evidence, and audit-ready documentation
  • Ability to interpret standards independently—you can read a framework document and translate it into actionable controls and evidence requirements
  • Self-driven learner with the curiosity and discipline to master new frameworks, regulations, and compliance requirements as business needs evolve

You have all our desired qualities if you have:

  • Professional certifications such as ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, ISO 9001 Lead Auditor, CISA, or other relevant Lead Implementer certifications (certifications will help streamline our filtering process, but real implementation experience matters most)
  • Exposure to or working knowledge of GDPR, CCPA, NIS Directive 2.0, SOC 2, PCI DSS, HIPAA, or NIST frameworks (we don't expect you to know them all; what matters is your ability to learn, interpret, and implement standards you haven't worked with before)
  • Experience supporting CERT-In empanelment, NCIIPC/QCI audits, or NABL/ISO accreditation processes
  • Exposure to OT/ICS security standards (IEC 62443) or medical device cybersecurity (IEC 81001-5-1, FDA premarket guidance)
  • Familiarity with GRC platforms (e.g., Scrut, Sprinto,ServiceNow GRC, Archer, MetricStream) tools
  • Strong communication skills with the ability to translate technical security findings into business risk language for leadership and clients

What you'll do at Payatu:

  • Lead ISO 27001, ISO 27701, ISO 17025, ISO 17020, ISO 17021-1, and SOC 2, GDPR,DPDPA, implementation and audit readiness programs for clients and internal operations
  • Conduct gap assessments, control maturity evaluations, and compliance roadmaps aligned with client business objectives
  • Own and maintain risk registers, treatment plans, audit logs, and compliance dashboards
  • Support pre-sales and client engagement by scoping GRC projects, drafting compliance proposals, and presenting audit findings
  • Collaborate with technical teams (VAPT, Red Team, IoT Security) to ensure security findings are contextualized within compliance frameworks
  • Prepare and present evidence packages for external audits, certification renewals, and regulatory inspections
  • Stay current on evolving regulations, frameworks, and industry best practices in the Indian and global compliance landscape

Why Payatu?

Join a team that treats compliance not as a checklist, but as a strategic enabler. Work alongside India's top offensive security researchers while building frameworks that protect critical infrastructure, secure sensitive data, and empower clients to meet the highest assurance standards. Grow your expertise across diverse sectors, frameworks, and emerging regulations in one of India's most respected cybersecurity consulting firms.

Equal Opportunity: Payatu is committed to creating an inclusive environment for all employees. We celebrate diversity and are committed to building a team that represents a variety of backgrounds, perspectives, and skills.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Payatu's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Payatu's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Payatu's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.