Information Security Engineer

Role overview

Information Security Engineer at Tredence

We are looking for a Cyber Security GRC Consultant to support Governance, Risk, Compliance (GRC), Privacy, and Business Continuity initiatives.

The role involves working with internal teams and stakeholders to ensure compliance with security and privacy standards, manage audits, and improve the organization's security posture.

Responsibilities

• Support Information Security, Privacy, and Business Continuity programs.
• Assist in ISO 27001, ISO 27701, ISO 22301, SOC 2, HITRUST, GDPR, and regulatory compliance activities.
• Conduct Privacy Impact Assessments (PIA/DPIA) and drive remediation of identified risks.
• Support Third-Party Risk Management (TPRM) and security governance initiatives.
• Develop and maintain security policies, procedures, and guidelines.
• Review security questionnaires, RFPs, contracts, DPAs, and privacy addendums.
• Work with stakeholders to ensure compliance with data protection laws such as GDPR, DPDP, and CCPA.
• Assist in business continuity and cyber resilience programs.
• Support audit preparation, reporting, metrics, and security council activities.
• Promote information security and privacy awareness across the organization.
• Required Skills 2-4 years of experience in Information Security, GRC, Privacy, or Compliance.
• ISO 27001, ISO 27701, ISO 22301 NIST CSF, NIST 800-53 PCI DSS, HIPAA, SOC 1/SOC 2, SOX Understanding of privacy regulations such as GDPR, DPDP, and CCPA.
• Experience with GRC tools like OneTrust, RSA Archer, or RSAM.
• Basic knowledge of cloud security controls in Azure, AWS, or GCP.
• Strong analytical, communication, and stakeholder management skills.
• Qualifications Bachelor's degree in Engineering or equivalent.
• Good problem-solving and analytical skills.
• Self-motivated and eager to learn.
• Positive attitude and ability to work collaboratively.

Required qualifications

• 2-4 Years

Preferred qualifications and skills

• Preferred certifications: CISSP, CISM, CISA, CRISC CIPP, CIPM, CDPSE ISO 27001/27701/22301 Lead Implementer or Auditor Preferred Attributes Strong attention to detail.

Employment details

• Location: Bangalore
• Location: Bangalore [India]

Additional role details

• Job Title: Consultant - Cyber Security GRC