Sr Consultant

Job description

We are seeking an experienced and strategic Cloud Security GRC Consultant to lead and govern Governance, Risk, and Compliance (GRC) initiatives for our enterprise customers. In this role, you will act as a trusted advisor, helping clients navigate the complexities of cloud security frameworks, data privacy laws, and industry regulations. You will bridge the gap between technical security controls and business objectives to protect customer assets and build trust Customer & Stakeholder Management · Serve as the primary subject matter expert (SME) on cloud security, governance, and compliance frameworks during client-facing engagements. · Lead customer workshops, conduct maturity assessments, and present risk mitigation strategies to client leadership and stakeholders. · Assist clients in responding to customer security questionnaires, RFP compliance sections, and enterprise third-party due diligence requests. Cloud Security Governance & Risk Management · Evaluate, design, and govern cloud security controls, policies, and standards across major platforms (e.g., AWS, Microsoft Azure, Google Cloud). · Help clients adopt and integrate Compliance & Risk Frameworks (e.g., ISO 27001, SOC 2, NIST CSF, HIPAA, or GDPR) for specific cloud deployments. · Perform cloud risk assessments utilizing frameworks like CSA CCM, CIS Benchmarks, and NIST SP 800-53. · Monitor Cloud Security Posture Management (CSPM) outputs, triage critical findings, and collaborate with customer DevSecOps teams to enforce remediation SLAs. · Advise customers on shared responsibility models across leading cloud providers (AWS, Microsoft Azure, Google Cloud). · Identify information security threats, evaluate their impact on client cloud infrastructure, and develop risk treatment plans. Compliance & Audit Readiness · Lead end-to-end certification and compliance programs for standards such as ISO 27001, SOC 2 Type II, PCI DSS, and HIPAA. · Act as the primary liaison between the customer and external certification auditors, managing evidence collection and non-conformity resolution. · Conduct gap analyses and internal audits against client security requirements. · Review third-party cloud service provider audit reports (e.g., SOC 2, ISO 27001) to provide assurance to clients during onboarding. · Knowledge and experience in Sovereign cloud compliance advisory and readiness related engagements. KNOWLEDGE and SKILLS · Hands-on experience with industry frameworks such as ISO 27001, SOC 2, NIST, or CIS benchmarks. · Foundational understanding of cloud architecture and security controls (Identity & Access Management, Data Encryption, and Cloud Security Posture Management - CSPM). Hands-on experience implementing security controls or governing GRC in AWS, Azure, or Google Cloud environments · Exceptional verbal and written communication skills to articulate complex security risks to non-technical business leaders · Familiarity with modern eGRC and automation platforms (e.g., ServiceNow GRC, RSA Archer, OneTrust, Security Command Center). · Should be able to travel on short as well as long term engagements CERTIFICATIONS PREFERRED CISA, CRISC, CISM, CISSP, or cloud-specific security certifications (e.g., AWS Certified S Key Responsibilities 1. Act As A Subject Matter Expert wherever required. Mentor the Junior Analysts to improve their Performance Through Feedback And Coaching. Build Product Expertise On A Large Quantity Of Diverse Products Through Thorough Research And Analysis Of Data From Multiple Channels. Provide Value Add To Business Process / Application Improvement Through Research And Analysis 2. Prepare And Develop Documentation For Tools And Project Processes To Support The Lead Trainer And Team Lead. Define Deliverables And Measures For The Project. Track Metrics At And Engagement And Individual Level And Monitor Timelines / Milestones 3. Prepare Periodic Report. Escalate And Solve Challenges With Respect To Projects In Coordination With Internal/External Stake Holders 4. Oversee A Small Group Of Project Team Who Are Responsible To Optimize Work Allocation To Maximize And Balance The Broad Set Of Goals Defined By The Team Leads Skill Requirements 1. Expert proficiency in SoC architecture and design, with in-depth knowledge of Verilog and UVM for digital verification. 2. Excellent understanding of C and C++ development as applied to embedded systems and SoC integration. 3. Strong familiarity with RTL design, simulation tools (e.g., Synopsys VCS, Cadence), and advanced verification methodologies. 4. Advanced proficiency in developing and reviewing testbench architectures using UVM. 5. Solid experience in mentoring technical teams and driving best practices in SoC development. Other Requirements 1. Recommended: Certified Verification Engineer (CVE) – UVM (Optional but valuable) 2. Recommended: IEEE Certified SoC Design Professional (Optional but valuable) Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will dis