Information Security GRC Manager

Role & responsibilities

8-10 years of experience in Information Security, Risk, Compliance, or Audit.

Minimum 4-5 years of dedicated GRC experience. Hands-on experience managing ISMS in an ISO 27001-certified environment.

Experience conducting risk assessments, audits, and compliance reviews.

Exposure to Third-Party Risk Management (TPRM) and vendor assessments.

Experience in policy development, governance reporting, and stakeholder management.

Preferred candidate profile

Strong understanding of security technologies such as DLP, EDR, NGAV, CASB,PAM/PIM, Firewalls, WAF, Email Security, Proxy, and Cloud Security.

Expertise in risk management, compliance assessment, and security governance.

Strong analytical, problem-solving, and reporting skills.

Excellent communication, stakeholder management, and presentation abilities.

Ability to translate technical security requirements into business-focused recommendations.

Self-motivated, proactive, and capable of working in a fast-paced environment.