Senior Manager - Governance Risk & Compliance (Cybersecurity)

Role Overview

We are seeking an experienced Senior Manager specializing in Governance Risk & Compliance (GRC) to lead cybersecurity projects ensuring security alignment with business goals. The position is based in Bengaluru, Karnataka, India.

Key Responsibilities

• Oversee end-to-end cybersecurity project management from inception through completion, focusing on security outcomes and aligning with organizational objectives.
• Define project parameters including scope, schedule, milestones, and resource distribution, emphasizing best security practices.
• Identify and manage security risks across project phases by developing and implementing mitigation strategies consistent with the organization's risk appetite.
• Collaborate effectively with internal and external stakeholders, prioritizing communication on security requirements and expectations related to project deliverables.
• Enforce compliance with cybersecurity policies, regulations such as DPDP and PCI-DSS, and industry standards by implementing and monitoring security controls and performing security assessments.
• Maintain thorough documentation related to security aspects including risk assessments, vulnerability analyses, and architectural diagrams; prepare security reports for senior leadership and stakeholders.
• Provide expert cybersecurity guidance to project teams ensuring security remains integral throughout project design and execution, including mentoring team members on security best practices.
• Oversee timely and effective handling of security incidents and escalations connected with projects.
• Continuously enhance security posture and project security by identifying and implementing improvements and best practices.

Qualifications

• 12 to 16 years of professional experience, including significant exposure to cybersecurity project leadership, preferably within cybersecurity or e-commerce domains.
• Bachelor's degree in a related discipline such as Computer Science or Information Security; advanced degrees or certifications like CISSP, CISM, CEH, OSCP strongly preferred, along with project management credentials such as PMP.
• Strong understanding of cybersecurity domains including network, application, data, and cloud security with expertise in architecture, risk and vulnerability management, and incident response.
• Proficiency with relevant security and collaboration tools including SIEM, vulnerability scanners, penetration testing utilities, firewalls, JIRA, and Confluence.
• Exceptional communication skills, adept at conveying complex security information to diverse audiences.
• Robust analytical and problem-solving abilities focused on security issue assessment and decision-making.
• Demonstrated leadership capabilities in guiding security-focused teams and influencing security outcomes effectively.