Information Technology Governance Consultant

Greetings from Linnk Group

Job Title: GRC Lead

Location: Kochi, Kerala

Employment: Full time

Role Summary

We are seeking an experienced GRC Lead to build and manage the Governance, Risk, and Compliance framework for a growing B2B SaaS organization. The role will focus on driving ISO 27001, SOC 2, and GDPR compliance, managing audits, risk assessments, security policies, and ensuring enterprise security readiness.

Key Responsibilities

• Own and manage ISMS, security policies, standards, and compliance frameworks.
• Lead ISO 27001, SOC 2, and GDPR initiatives, including audits and certification activities.
• Conduct security, cloud, application, and vendor risk assessments.
• Maintain risk registers and drive remediation activities.
• Support GDPR compliance, privacy assessments, and third-party risk management.
• Partner with Engineering, Legal, and Business teams on security initiatives.
• Manage customer security questionnaires and audit evidence requirements.
• Drive adoption of GRC automation tools such as Drata, Vanta, etc.

Requirements

• 6–10 years of experience in GRC, Information Security, or Compliance.
• Strong hands-on experience with ISO 27001, SOC 2, and GDPR.
• Experience working in SaaS/cloud environments (AWS/Azure).
• Knowledge of risk management frameworks, audits, and compliance tools.
• Preferred certifications: CISA, CRISC, ISO 27001 Lead Implementer/Auditor.

Key Skills

• Information Security Governance
• Risk & Compliance Management
• ISO 27001, SOC 2, GDPR
• Audit & Certification Management
• Vendor Risk Management
• Policy & Control Frameworks
• Stakeholder Management & Executive Communication

If you are interested in the role, please do share your CV to [email protected]