Governance Risk and Compliance - Consultant

KPMG Global Services
Apply Now ↗
📍 Bangalore, Karnataka, IndiaFull time

About this role

•As a GRC Analyst supporting the ISO 27001 program, you will help maintain and enhance the organization's Information Security Management System (ISMS).
•Responsibilities include performing control assessments and testing, supporting ISO 27001 audits and certification activities, monitoring compliance with ISO 27001 requirements, managing audit findings and remediation actions, maintaining ISMS documentation, and tracking program readiness to strengthen the organization's security and compliance posture.
•Support the implementation, maintenance, and continual improvement of the ISO 27001 Information Security Management System (ISMS).
•Conduct risk assessments for systems, applications, and third-party vendors in alignment with ISO 27001 and NIST CSF.
•Perform control assessments and testing to evaluate the effectiveness of security controls and recommend remediation actions.
•Conduct gap assessments and compliance reviews against ISO 27001 requirements and related security frameworks.
•Support ISO 27001 certification, surveillance audits, and audit readiness activities.
•Coordinate internal and external audits, including evidence collection and tracking of corrective actions.
•Maintain risk registers, policies, procedures, and other ISMS documentation.
•Monitor and track audit findings, risks, issues, and remediation plans through closure.
•Collaborate with business, IT, security, and compliance teams to ensure adherence to ISO 27001 requirements.
•Facilitate management reviews, governance meetings, and compliance reporting.
•Utilize IRM modules, including Risk, Policy & Compliance, Audit, and Issue Management, to support program operations.
•Added advantage: Experience working with ServiceNow IRM modulesble. 
 

Work experience

•Good years of experience in Governance, Risk & Compliance (GRC), Information Security.
•Relevant years of experience managing ISO certification programs.
•Strong understanding of ISO 27001 standard.
•Experience with risk assessments, control frameworks, and audit management.
•Excellent stakeholder management, communication, and project management skills.
  • Strong client interaction skills, both written and verbal
  • Highly Fluent in English – verbal and written
  • Critical thinking, including questioning, digestion, thought process, and documentation of same.
  • Acute attention to detail.
  •  Exceptional time management, including speed and ownership to drive closure and seek solutions.
  • Ability to effectively manage competing priorities.

Additional Qualification: 

  • •Prior consulting experience with big 4 or large clientele is preferable.
  • •ISO27001-LA/LI, CISA, CRISC or CISSP is preferrable 

Frequently Asked Questions

Is the salary disclosed for the Governance Risk and Compliance - Consultant position at KPMG Global Services?
The salary for this Governance Risk and Compliance - Consultant role at KPMG Global Services is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Governance Risk and Compliance - Consultant position at KPMG Global Services located?
This Governance Risk and Compliance - Consultant role at KPMG Global Services is based in Bangalore, Karnataka, India. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Governance Risk and Compliance - Consultant role at KPMG Global Services full-time or part-time?
This is listed as a Full time position. It is posted as a Governance Risk and Compliance - Consultant role at KPMG Global Services.
How do I apply for the Governance Risk and Compliance - Consultant position at KPMG Global Services?
Click the "Apply Now" button on this page. You will be redirected to KPMG Global Services's official application portal hosted on oraclecloud where you can submit your application directly.
When was the Governance Risk and Compliance - Consultant job at KPMG Global Services posted?
This Governance Risk and Compliance - Consultant position at KPMG Global Services was posted on Sep 16, 2026. Apply as soon as possible — early applications are often reviewed first.
Governance Risk and Compliance - Consultant
KPMG Global Services
Apply for this role ↗

You'll be redirected to KPMG Global Services's official application page on oraclecloud.