Associate-Cybersecurity – Strategy, Governance, Risk & Compliance, Advisory

Overview

Support the delivery of cybersecurity consulting engagements across diverse client environments, including gap and risk assessments, security framework implementation, and policy development.

What you'll do

• Conduct comprehensive cybersecurity gap assessments across client environments, evaluating governance, processes, and technical controls.
• Design, develop, implement, and maintain information security frameworks and control programs aligned with ISO/IEC 27001:2022, NIST Cybersecurity Framework (CSF) 2.0, NIST SP 800-53, and other applicable industry standards.
• Perform risk assessments focusing on cybersecurity and information security risks, business continuity and operational resilience, and data protection and privacy risks.
• Develop and document cybersecurity policies, standards, procedures, and guidelines aligned with international standards, contractual requirements, and organizational objectives.
• Lead independent third-party security assessments, audits, and maturity evaluations, and deliver clear, actionable, and risk-prioritized recommendations.
• Support organizations in improving cybersecurity maturity, including risk management, control design, remediation planning, and continuous improvement initiatives.
• Manage client engagements end-to-end, including RFP responses and proposal development, engagement planning, execution, and delivery management, and stakeholder communication and reporting.
• Collaborate effectively with cross-functional internal teams and external stakeholders, including IT, engineering, legal, compliance, and business leadership.

What you'll need

• Strong understanding of cybersecurity risk management, governance, and control frameworks.
• Ability to translate technical findings into business-relevant insights.
• Experience producing clear, structured documentation and executive-level reports.
• Ability to work across diverse client environments and operating models.
• Ability to drive compliance maturity and foster strong stakeholder relationships.
• Awareness of cybersecurity considerations in mixed IT and engineering/OT environments, including high-availability and operational constraints.
• Cybersecurity as a required skill.
• 4+ years of experience.
• Master of Business Administration (required degree/field of study).

Nice to have

• Exposure to complex, IP-sensitive technology environments is considered a value-add.
• Semiconductor industry experience will be preferred.
• Understanding of technology- or IP-driven environments (e.g., advanced manufacturing or semiconductor) is a plus, but not mandatory.
• Automotive skill set (mandatory and preferred skill sets listed as Automotive, cybersecurity).
• MBA preferred; any graduate accepted.

Details

• Location: Chennai - Menon Eternity.
• Job posting end date: June 9, 2026.