Manager - GRC

Manager / Senior Manager – Governance, Risk & Compliance (GRC)

Location

Bangalore

Experience

8–10 years of experience in Governance, Risk, Compliance, and Information Security.

Role Overview

The GRC Manager / Senior Manager is responsible for leading cybersecurity governance, risk management, compliance, and awareness programs in ZEE. This role ensures enterprise-wide risk visibility, audit readiness, regulatory compliance, and continuous improvement of the cybersecurity maturity posture.

Key Responsibilities

Risk Management & Governance

• Maintain an up-to-date enterprise risk register including risk assessment, mitigation, and acceptance inputs with status.

• Conduct weekly reviews of enterprise and engineering risks and policy exceptions and track closure.

• Perform proactive risk identification through process reviews, audits and control testing.

• Publish fortnightly cybersecurity and privacy risk summary reports to leadership.

• Track KPIs and publish dashboards indicating control maturity.

Security Awareness & Training

• Plan and execute weekly cybersecurity awareness campaigns via email.

• Conduct monthly cybersecurity and privacy training for contractors.

• Lead quarterly ethical phishing simulations, reduce phishing failure rates and improve reporting rate.

• Execute industry-event-based awareness programs and annual gamified security carnival.

Policies, ISMS & Process Reviews

• Lead annual Information Security Policy and Procedure reviews with cross-functional stakeholders.

• Plan and execute ISMS risk assessments, internal and external ISO 27001 audits.

• Review cybersecurity processes and recommend enhancement to process and control measures for improvement.

Leadership Reporting & Governance Committees

• Prepare quarterly cybersecurity and monthly business review reports for CIO and leadership.

• Convene and manage Information Security & Privacy Steering Committee (ISPSC) meetings and track actions/decision out of the meetings for closure.

Audit, Compliance & Contracts

• Assist the team during internal, corporate, and statutory audits.

• Review MSAs, NDAs, and project engagements for security obligations.

• Support in security and privacy compliance portal submissions.

Financial & Corporate Governance

• Track cybersecurity budget consumption and renewals.

• Provide cybersecurity inputs for ESG, BRSR and Annual reporting.

Qualifications & Certifications

• Bachelor’s degree in Engineering, Computer Science, or related field.

• Preferred certifications: CISM, CISSP, CRISC, ISO 27001 Lead Auditor/Implementer.

Job Requirement

• GRC & Risk Management
• ISO 27001 / ISMS
• Audit & Compliance
• Security Governance
• Risk Reporting & Dashboards