Matayo- Ai Solutions Pvt. Ltd

MICO Layout, Bangalore

Job Title:GRC Consultant PCI DSS & SOC 2 (Immediate Joiners Only)Location: BangaloreExperience: 4 YearsCTC: 7.2 LPAEmployment Type: Full-TimeJoining: Immediate / Within 15 DaysRole OverviewWe are looking for a GRC Consultant PCI DSS & SOC 2 with proven experience in delivering PCI DSS and SOC 2 (Type I & Type II) engagements. The consultant will be responsible for end-to-end compliance execution, audit readiness, and client coordination.Mandatory CertificationsMinimum 2 certifications are mandatory:One PCI DSS certification (PCI DSS Implementer / PCI ISA)ANDOne of the following:CISACISSPCRISC(Profiles not meeting this certification criterion will not be considered.)Mandatory Experience4 years of experience in GRC / Information Security ComplianceMinimum 4 completed projects in:PCI DSSSOC 2 (Type I & Type II)Strong knowledge of PCI DSS v4.0 and SOC Trust Services CriteriaClient-facing experience and audit coordinationImmediate joiner or notice period 15 daysLocation Bangalore How to ApplySend your updated resume to: admin_hr@matayo-ai.comPlease mention in the email:Total experiencePCI DSS & SOC 2 project detailsCertification detailsCurrent CTC Expected CTCNotice period / Joining availability

Matayo AI Solutions Pvt Ltd (Matayo 360 GRC Service Division) is looking for a passionate GRC Consultant to join our fast-growing compliance advisory team.If you live and breathe ISO 27001, SOC 2, PCI DSS can think like an auditor, and love solving risk management puzzles we want to meet you! Position: Location: Hybrid (Bangalore/ Remote India) Experience: 12 Years in GRC / ISO 27001 Implementation Qualification: ISO 27001 Lead Implementer or Lead Auditor (Mandatory)CTC: 4,50,000 PA to 6,00,000 PA Key Skills Required: Hands-on experience in implementing and auditing ISO/IEC 27001:2022 Familiarity with ISO 31000 Risk Management principles Understanding of Annex A controls and Statement of Applicability (SoA) Experience conducting Internal Audits, Risk Assessments, and GAP Analysis Documentation skills policies, procedures, risk registers, audit checklists Exposure to SOC 2 readiness, GDPR, or DPDPA (added advantage) Excellent written and verbal communication skills Roles & Responsibilities:1 Governance & Compliance Assist clients in implementing ISO 27001:2022 ISMS framework, including defining scope, policy documentation, control implementation, and management review. Conduct GAP assessments and prepare SoA and Risk Treatment Plans. Align controls with frameworks like SOC 2, PCI DSS, HIPAA, and GDPR as needed.2 Risk Management Perform risk identification, analysis, and evaluation in line with ISO 31000. Develop and maintain Risk Register using impactlikelihood matrices. Recommend and track risk treatment plans and mitigation actions.3 Internal Audit & Assurance Plan and execute Internal Audits based on ISO 27001:2022 Annex A controls. Collect and review evidence from business, IT, and HR departments. Prepare audit reports, NC (Nonconformity) logs, and CAPA (Corrective Action) tracking. Support clients in external certification audits with CBs.4 Documentation & Reporting Draft and maintain compliance documents: ISMS Manual, Policies, Procedures, Risk Register, SoA, and Audit Checklists. Prepare MIS dashboards, compliance status reports, and management review summaries.5 Client Engagement & Delivery Support end-to-end GRC project execution from scoping to closure. Coordinate with cross-functional teams and external auditors. Deliver presentations and training to clients on ISMS and Risk Management concepts. Project Exposure: Should have successfully executed at least two (2) complete ISO 27001 or integrated GRC implementation projects (from GAP to certification stage). Soft Skills: Strong analytical, problem-solving, and documentation capabilities Ability to manage multiple client projects simultaneously High integrity, confidentiality, and attention to detail Career Path: Growth into Senior GRC Consultant / vCISO Track within 23 years Exposure to global frameworks SOC 2, PCI DSS, HITRUST, ISO 42001 (AI Governance), NIST Compensation:Competitive salary based on experience and certification level performance-based incentives per project completion How to Apply: Send your resume and certification copies toadmin_hr@matayo-ai.com