EC Council•2h ago
Naukri
GRC Consultant
Remote
Remote
Mid Level
Full Job Description
Job Title: GRC Consultant - AI Security Management Systems (AISMS)
EC-Council is the worlds largest cyber security technical certification body. We operate in 170 countries globally and are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally who have influenced the cyber security mindset of countless organizations worldwide.
Role Overview: GRC Consultant to help clients assess, design, and operate AI Security Management Systems (AISMS) that demonstrably assess & govern their AI estate. The ideal candidate combines a solid GRC/audit/security foundation with real, working exposure to how AI systems are built and can carry both into a client engagement.
Key Responsibilities:
- Assessment & Gap Analysis: Assess AI governance posture against ISO/IEC 42001, the NIST AI Risk Management Framework, and applicable regulation; build AI system inventories and risk-tiered remediation roadmaps.
- Management System Design: Draft AI governance policies, intake and approval workflows, risk registers, and statements of applicability; define control ownership across the three lines of defence.
- Audit & Certification Readiness: Run mock audits and evidence sampling; prepare clients for internal audit and third-party certification, and support surveillance and recertification cycles.
- Third-Party AI Risk: Assess third-party models, GenAI SaaS features, and agentic integrations; review vendor AI provisions and help clients maintain AI bills of materials.
- Client Enablement: Facilitate workshops across legal, security, data science, and audit stakeholders; produce assessment reports, board papers, and training material.
- Mentorship: Mentor junior consultants on AI governance methodology and client delivery.
Required Qualifications:
Years of Experience: 2 to 5 years in GRC, IT audit, information security, or privacy, with meaningful exposure to AI-specific governance, risk, or assurance work.
Education: Bachelors degree in a related field.
Certifications: AI governance credential (e.g. IAPP AIGP or ISO/IEC 42001 Lead Auditor); ISO/IEC 27001 Lead Auditor or Lead Implementer, or CISA/CISM/CRISC is a plus.
Technical Literacy: Working understanding of the AI/ML lifecycle foundation vs. fine-tuned models, agentic tool use, and where governance gaps typically hide sufficient to hold a credible conversation with an ML engineer.
Company
EC Council
EC-Council is the world's largest cybersecurity technical certification body, operating in 170 countries globally. As the owner and developer of globally recognized cybersecurity programs, we have tra...
Remote
Posted on Naukri