Cyber Security GRC Professional

Key Responsibilities:

• Manage Cyber Security policies, procedures, standards, and governance framework
• Drive Risk, Incident, Change, Problem, and Cyber Crisis Management processes
• Ensure compliance with IRDAI regulations, ISO 27001:2022, and DPDP Act requirements
• Conduct cyber security drills, tabletop exercises, and awareness campaigns
• Track security exceptions, vulnerability assessments, application security findings, and remediation activities
• Lead audit readiness and closure for Internal, ISO, and Regulatory audits
• Prepare MIS, KRIs/KPIs, risk dashboards, and Board/CISO presentations
• Manage third-party risk assessments, vendor due diligence, and review security clauses in contracts

Desired Profile:

• BE/B.Tech with 4-6 years of experience in Cyber Security, GRC, Risk Management, or Compliance
• Strong understanding of ISO 27001:2022, DPDP Act, IRDAI Cyber Security Guidelines, Third-Party Risk Management, and Security Governance
• Preferred Certifications: ISO 27001 Lead Auditor/Implementer, CEH
• Strong stakeholder management, audit, compliance, and reporting skills