Manager Infosec GRC

Department : Information Security

Location : Mumbai

Reports to : IS GRC Head

Employment Type : Full-time

Job Purpose :

This role is responsible for driving the organization's Information Security Governance, Risk, and Compliance (GRC) function, Industry standards (ISO 27001, NIST CSF), and regulatory requirements. The candidate will lead internal audits, vendor risk governance, SOC 2 readiness, automation initiatives, client assessments, and security awareness across the enterprise—while managing a team of security professionals.

Key Responsibilities :

Governance, Risk & Compliance

• Implement and maintain a scalable Information Security GRC framework based on ISO 27001, NIST Cybersecurity Framework, and applicable regulatory requirements (RBI, SEBI, IRDAI, DPDPA).
• Manage the information security policy lifecycle, risk registers, and control objectives across business units.
• Lead the exception management process, including impact assessments, approval workflows, and periodic reviews.

Internal Audit & Control Testing

Vendor Risk Management (End-to-End)

Automation & Tooling

SOC 2 & Compliance Readiness

Security Training & Awareness

Incident Response Oversight

Reporting & Stakeholder Engagement

Team Leadership

Key Requirements : Qualifications :

Experience :

Skills & Competencies :

Skills Required

Iso 27001, Archer