Security Consultant – GRC & Customer Success

About Bugmetrics
Bugmetrics is a cybersecurity technology company building a unified Cyber Risk Posture Management platform that helps organizations measure, manage, and improve their cybersecurity maturity across People, Process, and Technology. Our platform simplifies security assessments, compliance automation, vulnerability management, and risk management, enabling businesses to make informed cybersecurity decisions.

About the Role
We are looking for a proactive and customer-focused Security Consultant – GRC & Customer Success with 1–2 years of experience in cybersecurity consulting, information security, and compliance implementation.

The ideal candidate should have hands-on experience with ISO 27001:2022 and SOC 2 implementation, a sound understanding of technical security controls, and excellent communication skills.

This role involves managing customer engagements, providing practical cybersecurity guidance, coordinating with auditors, resolving compliance-related queries, and helping customers effectively adopt the Bugmetrics platform.

Key Responsibilities

• Compliance Implementation: Lead and manage ISO 27001:2022 and SOC 2 implementation engagements, ensuring timely delivery and audit readiness.
• Security Consulting: Advise customers on information security policies, risk assessments, security controls, and compliance best practices.
• Customer Success: Build strong customer relationships, understand business requirements, resolve queries, and ensure a positive customer experience.
• Audit Management: Coordinate with external auditors and certification bodies to facilitate ISO 27001 certification audits and SOC 2 examinations.
• Audit Partner Coordination: Identify, evaluate, and maintain relationships with audit partners while ensuring effective communication throughout audit engagements.
• Gap & Risk Assessments: Conduct security gap assessments, risk assessments, and compliance reviews to identify improvement opportunities.
• Technical Security Advisory: Guide customers on security controls involving firewalls, EDR, XDR, SIEM, SOC operations, IAM, vulnerability management, and incident response.
• Regulatory Compliance: Support customers with applicable cybersecurity regulations, including SEBI CSCRF, RBI, and IRDAI requirements.
• Compliance Documentation: Prepare and maintain security policies, risk registers, Statements of Applicability (SoA), audit evidence, and implementation documentation.
• Stakeholder Management: Communicate effectively with customer leadership, IT teams, security teams, auditors, and internal stakeholders.
• Product Adoption: Help customers leverage Bugmetrics for compliance automation, evidence management, security assessments, and continuous cybersecurity monitoring.
• Product Collaboration: Work closely with product and engineering teams to translate customer feedback and compliance challenges into actionable product improvements.

Required Skills & Qualifications

• Experience: 1–2 years of relevant experience in cybersecurity consulting, GRC, information security, or compliance implementation.
• Framework Knowledge: Practical knowledge of ISO 27001:2022 and SOC 2 implementation, risk assessments, and audit processes.
• Technical Understanding: Strong foundational knowledge of firewalls, EDR, XDR, SIEM, SOC, IAM, networking, and cybersecurity operations.
• Consulting Skills: Ability to understand customer requirements, recommend practical security solutions, and independently manage implementation activities.
• Communication Skills: Excellent verbal and written English communication skills with the confidence to handle customer meetings and auditor discussions.
• Customer Management: Strong interpersonal skills with the ability to manage customer expectations, resolve queries, and maintain long-term relationships.
• Audit Readiness: Understanding of audit preparation, evidence collection, compliance documentation, and corrective action management.
• Problem-Solving: Ability to analyze security and compliance challenges and provide actionable recommendations.
• Ownership: Strong organizational skills with the ability to manage multiple customer engagements and deliverables independently.
• Preferred Qualifications
• ISO 27001 Lead Auditor: ISO 27001:2022 Lead Auditor (LA) certification will be a strong advantage.
• Regulatory Knowledge: Familiarity with SEBI CSCRF, RBI cybersecurity requirements, and IRDAI guidelines will be highly preferred.
• Audit Experience: Prior experience coordinating ISO 27001 certification audits or SOC 2 Type I/Type II examinations.
• Industry Exposure: Experience working with fintech, BFSI, SaaS, or other regulated organizations.
• GRC Tools: Familiarity with compliance automation platforms, risk management tools, and evidence management systems.