Risk Manager – GRC

Hiring for Information Security – Risk Manager – GRC (BCP & ISO 27001 : 2022 Implementation)

Experience required for the Job : 5 - 10 years

Job Location : Delhi

Position : Risk Manager – GRC

Job Summary :

The Risk Manager – GRC (ISO 27001 : 2022 & BCP) is responsible for overseeing the implementation, maintenance, and continual improvement of the Information Security Management System (ISMS) in alignment with ISO 27001 : 2022 standards . This role ensures that the organization’s information security practices meet regulatory requirements, client expectations, and industry best practices, while also mitigating risks to the confidentiality, integrity, and availability of information.

Education :

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• A Master’s degree is a plus.

Experience :

Certifications :

Skills :

Key Responsibilities :

1. ISMS Implementation & Maintenance

2. Risk Management

3. Compliance & Audit Management

4. Training & Awareness

5. Incident Management

6. Continuous Improvement

7. Stakeholder Communication

8. Vendor and Third-Party Management

9. Coordinate business continuity and technology disaster recovery drills and tabletop exercises as appropriate.

10. Identify critical systems and categorize them based on enterprise and operational risks crucial to continued business operations in the event of a disaster.

11. Create reports as needed for different levels of leadership, covering all aspects of BCP.

12. Conduct weekly status reports, DR readiness reviews, milestone reviews, and post-exercise reviews.

Note : This role is 60% documentation and process-oriented.