Consultant, InfoSec Risk Management & Governance

Responsibilities

• Develop and maintain the organization’s security governance framework, including policies, procedures, and standards aligned with ISO 27001 and NIST.
• Drive certification compliance for key industry frameworks such as ISO 27001, PCI-DSS, SOC1, and SOC2.
• Lead the development of a comprehensive risk management program to identify, assess, and manage cybersecurity risks across the enterprise.
• Perform security assessments and due diligence for third-party vendors to ensure contractual and security requirements are met.
• Manage regulatory inspections (such as RBI) and handle regulatory submissions for information security requirements.
• Conduct RCSA and periodic control testing for the InfoSec unit.
• Drive organization-wide security awareness programs, including content creation and phishing simulations.
• Act as a Subject Matter Expert (SME) on information security regulatory matters to provide guidance to various functions.

Requirements

• 6-8 years of experience in information security, with at least 4 years specifically in a GRC (Governance, Risk, and Compliance) role.
• In-depth knowledge of security frameworks including ISO 27001, NIST, and CIS Controls.
• Strong understanding of risk management methodologies, governance structures, and regulatory compliance requirements.
• Exceptional communication and presentation skills with the ability to influence senior executives and board members.
• High-level proficiency in GRC tools, risk assessment methodologies, and security metrics reporting.

Preferred Qualifications

• Fundamental clarity and exposure to Cloud security principles.

About the Company

TransUnion is a global information and insights company with over 12,000 associates operating in more than 30 countries. We provide sophisticated risk information solutions that help consumers and businesses transact with confidence. We are committed to "Information for Good," using data to create economic opportunity and personal empowerment worldwide.