| Job Detail | Full Information |
|---|
| Job Title | Consultant – Governance, Risk and Compliance (GRC) |
| Company | KPMG Global Services (KGS) |
| Job ID | 30049890 |
| Job Location | One, Bangalore, Karnataka – 560103, India |
| Job Type | Full-time |
| Posting Date | 22 October 2026, 11:14 AM |
| Apply Before | 24 October 2026, 12:00 AM |
| Educational Qualification | Graduation |
| Job Overview | Support the organization’s ISO 27001 Information Security Management System (ISMS), risk management, security compliance, audit readiness, and continuous improvement initiatives. |
| Key Responsibilities | Maintain and improve the ISO 27001 ISMS; conduct risk assessments for systems, applications, and third-party vendors; perform control assessments and testing; carry out gap assessments and compliance reviews; support ISO 27001 certification and surveillance audits; coordinate internal and external audits; collect audit evidence; track corrective actions and remediation plans. |
| Risk & Compliance Management | Maintain risk registers, security policies, procedures, and ISMS documentation. Monitor audit findings, risks, issues, and remediation actions until closure. Ensure compliance with ISO 27001 and relevant security frameworks. |
| Frameworks & Standards | ISO 27001 and NIST Cybersecurity Framework (NIST CSF). |
| Tools & Technology | Experience with Integrated Risk Management (IRM) modules, including Risk, Policy & Compliance, Audit, and Issue Management. ServiceNow IRM experience is an added advantage. |
| Work Experience | Relevant years of experience in Governance, Risk & Compliance (GRC), information security, and managing ISO certification programs. The exact number of years is not specified. |
| Preferred Qualifications | Prior consulting experience with a Big Four firm or large clients is preferred. ISO 27001 Lead Auditor (LA) / Lead Implementer (LI), CISA, CRISC, or CISSP certifications are desirable. |
| Required Skills | Strong understanding of ISO 27001, risk assessments, control frameworks, audit management, stakeholder management, communication, and project management. |
| Communication Skills | Excellent written and verbal English, strong client interaction skills, and the ability to communicate effectively with business, IT, security, and compliance teams. |
| Professional Competencies | Critical thinking, attention to detail, time management, ownership, problem-solving, documentation, and the ability to manage competing priorities and meet deadlines. |
| Additional Responsibilities | Support management reviews and governance meetings, prepare compliance reports, monitor program readiness, and coordinate with stakeholders to strengthen security and compliance practices. |
