01
TRPD-26-06673
Information Security – Cyber Control Simplification & Reporting
This permanent role focuses on simplifying and rationalizing cyber controls across security domains, then improving how control effectiveness, gaps, and cyber risk are reported to leadership. The core requirements are experience with security control frameworks, control assessment and optimization, executive risk reporting, GRC tools, and strong analytical, documentation, and stakeholder skills. The description calls for 6+ years of relevant experience, while the structured experience band is 6–10 years. Preferred background includes CISA, CISM, CRISC, or ISO 27001 auditor certifications, plus large-enterprise or BFSI exposure and control automation or data analytics. The location is Pune; work mode is not specified, and the description does not identify a specific product or industry team.
Position summary
- Location
- India
- Workplace
- Hybrid
- Employment
- Full Time
- Experience
- Minimum 6 years and Maximum 10 years
Role overview
Why This Role Matters.
This permanent role focuses on simplifying and rationalizing cyber controls across security domains, then improving how control effectiveness, gaps, and cyber risk are reported to leadership. The core requirements are experience with security control frameworks, control assessment and optimization, executive risk reporting, GRC tools, and strong analytical, documentation, and stakeholder skills. The description calls for 6+ years of relevant experience, while the structured experience band is 6–10 years. Preferred background includes CISA, CISM, CRISC, or ISO 27001 auditor certifications, plus large-enterprise or BFSI exposure and control automation or data analytics. The location is Pune; work mode is not specified, and the description does not identify a specific product or industry team.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Review, assess, and streamline existing security controls to eliminate redundancy and improve effectiveness
03
Map controls across frameworks such as ISO 27001, NIST CSF, CIS, COBIT, etc.
04
Develop and maintain control matrices, risk-control mappings, and governance dashboards
05
Design executive-level cyber risk and control reporting for leadership and board consumption
06
Support regulatory and compliance requirements through structured reporting and evidence management
07
Collaborate with IT, Risk, Compliance, and Business stakeholders to align controls with enterprise risk appetite
08
Drive automation and optimization of control monitoring and reporting processes
09
Track remediation activities and provide status updates on control gaps and risk exposure
10
Participate in internal and external audits and support issue closure
11
6+ years of experience in Information Security / Cyber Risk / IT Controls
12
Strong understanding of control frameworks (ISO 27001, NIST, SOC2, CIS, etc.)
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
ISO 27001
Required
02
ISO 27001 LA
Required
03
ISO 27001 LI
Required
04
NIST
Required
05
NIST CSF
Required
06
SOC 2
Required
07
CIS Controls
Required
08
COBIT
Required
09
GRC
Required
10
Archer
Required
11
RSA Archer
Required
12
ServiceNow GRC
Required
13
MetricStream
Required
14
control assessment
Required
15
control rationalization
Required
16
control optimization
Required
17
control matrix
Required
18
risk-control mapping
Required
19
cyber risk dashboard
Required
20
executive risk reporting
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
6+ years of experience in Information Security, Cyber Risk, or IT Controls
Understanding of control frameworks including ISO 27001, NIST, SOC 2, and CIS
Hands-on control assessment, rationalization, and optimization
Executive cyber risk dashboards and control reporting
Knowledge of GRC tools such as Archer, ServiceNow GRC, or MetricStream
Analytical and documentation skills
Cross-functional stakeholder collaboration
Control matrices, risk-control mappings, evidence management, and remediation tracking
Preferred
Nice to Have
COBIT framework knowledge
Understanding of RBI, GDPR, or SOX regulatory environments
CISA, CISM, CRISC, or ISO 27001 Lead Auditor/Lead Implementer certification
Large enterprise or BFSI experience
Control automation and data analytics for security reporting
Internal and external audit support
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Information Security – Cyber Control Simplification & Reporting
One page, about two minutes. We only ask for what we actually need to have a first conversation.