Cyber Security GRC Manager

Cyber Security GRC Manager

Location: Sanpada, Navi Mumbai

Experience: 6–8 Years

CTC: ₹20–22 LPA

Employment: Full-Time | On-Site

About the Opportunity

HRPlacers is hiring an experienced Cyber Security GRC Manager for an established industrial group. The position requires a professional with strong expertise in cybersecurity governance, risk management, compliance and information security frameworks.

Key Responsibilities

• Develop and implement cybersecurity policies, procedures and governance frameworks.
• Manage information security risk assessments, compliance reviews and internal audits.
• Ensure alignment with ISO 27001, NIST and applicable cybersecurity standards.
• Coordinate security audits, vulnerability assessments and penetration testing (VAPT).
• Oversee security operations, incident management and remediation activities.
• Review Identity and Access Management (IAM), Privileged Access Management (PAM) and security controls.
• Support cybersecurity initiatives covering enterprise IT and operational technology (OT) environments.
• Maintain risk registers, compliance documentation and management reports.
• Coordinate with IT infrastructure, SOC, auditors and external security partners.
• Drive cybersecurity awareness and continuous improvement initiatives.

Qualifications & Experience

• Bachelor's degree in Computer Science, IT, Engineering or a related discipline.
• 6–8 years of relevant experience in cybersecurity, information security or GRC.
• Strong knowledge of ISO 27001, NIST, risk management and compliance frameworks.
• Experience in security audits, VAPT coordination and risk mitigation.
• Understanding of SOC operations, IAM/PAM and incident response.
• Experience in manufacturing or industrial environments preferred.
• Certifications such as CISM, CISA or ISO 27001 Lead Auditor preferred.
• Excellent analytical, documentation, communication and stakeholder management skills.

How to Apply

Interested candidates should apply through LinkedIn with an updated resume highlighting their cybersecurity governance, risk management and compliance experience.