← All roles

Senior Technical Consultant - Security GRC

AHEAD· Security Delivery
Apply on company site
Hybrid (Gurugram, India)Full-timePosted 3w ago

About the role

Senior consulting role focused on security GRC (Governance, Risk, and Compliance). You diagnose program maturity, design target-state operating models, quantify risk in business terms, and deliver frameworks, artifacts, and knowledge transfer to clients. Remote with on-site in Gurugram, India.

Responsibilities

  • Shape problem statements, engagement scope, assumptions, and success criteria with the client sponsor and account team.
  • Build workplans, RAID logs, and stakeholder maps; maintain delivery quality even with incomplete client evidence or ownership.
  • Facilitate workshops with CISOs, control owners, internal audit, legal, procurement, and executives; drive decisions.
  • Manage resistance, conflicting frameworks, and policy arguments while preserving facts.
  • Write and present deliverables that survive legal, audit, and executive review (current-state assessments, target operating models, control crosswalks, risk registers, quantified scenarios, roadmaps, board narratives).
  • Coach client staff to ensure program continuity after engagement ends.
  • Support pre-sales and scoping when asked (approach, level of effort, delivery risks, and what “good” looks like).
  • Assess and design against NIST CSF (1.1 and/or 2.0) profiles, subcategory outcomes, and CSF as executive spine.
  • Assess NIST SP 800-53 (Rev. 5 preferred): control families, baselines, overlays, and assessment procedures.
  • Assess NIST SP 800-171 implementation for CUI (including 800-171A-style objectives, CUI flows, POA&Ms, contractor implications).
  • Apply CIS Controls (v8 preferred) as a prioritized operational set (IG1–IG3) mapped to CSF and 800-53.
  • Interpret and assess the CRI Profile and related expectations.
  • Design or uplift ISO/IEC 27001 ISMS (scope, SoA, risk assessment/treatment, internal audit liaison, management review inputs, certification readiness).
  • Build and maintain crosswalks so one control, one owner, and one evidence package satisfy multiple frameworks.

Qualifications

  • Highly proficient written and spoken English at executive, audit, and client-delivery standard.
  • Demonstrated senior consulting or equivalent client-advisory experience: scoping ambiguous problems, facilitating senior workshops, managing difficult stakeholders, producing commercial-quality deliverables, defending recommendations, and transferring methods to the client.
  • Frameworks (all required, with working depth—not acronym familiarity): NIST CSF, NIST SP 800-53, NIST SP 800-171, CIS Controls, CRI Profile, ISO/IEC 27001 (27002 familiarity).
  • Risk management and quantification capability (identify, analyze, evaluate, treat, accept, monitor) with explicit risk scenarios and expected loss.
  • Roughly 5+ years in security GRC, risk, audit, or control assurance, including substantial consulting or senior client-advisory experience; bachelor’s degree or equivalent.

Skills

Required:English communication (executive level)GRC frameworksRisk quantificationClient engagement and workshops

Benefits

  • Comprehensive health insurance coverage for employees (with dependents option)
  • Paid time off and company holidays with policy-based additional leave
  • Flexible work arrangements
  • Learning and development opportunities
  • Employee wellness initiatives
  • Retirement and statutory benefits aligned with India regulations
  • Inclusive, people-first culture
Last updated Oct 21, 2026. Interested? Apply on the company site.
AHEAD logo

About AHEAD

Digital Platforms Engineered for Modern Enterprises

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations.

Platform SolutionsInfrastructure ModernizationLifecycle ManagementSeamless Integration
Company profileWebsite

More open roles at AHEAD