GRC Cyber security Manager

Role Description The GRC Cyber Security Manager will lead governance, risk, and compliance initiatives to ensure the organization’s security posture aligns with regulatory and industry standards. This full-time, on-site role in Navi Mumbai involves developing and maintaining security policies, frameworks, and procedures, as well as conducting risk assessments and overseeing vulnerability management activities. The manager will coordinate with cross-functional teams to implement controls, monitor compliance, and support audits and certifications. Daily responsibilities include reviewing security incidents, guiding remediation efforts, reporting risk and compliance metrics to leadership, and promoting security awareness across the organization. The role requires strong stakeholder management, clear communication, and the ability to translate complex security requirements into practical, business-aligned solutions.

Qualifications

• Strong skills in Cybersecurity and Information Security, with experience managing enterprise-wide security programs.
• Proficiency in Application Security, including secure development practices and assessment of application-level risks.
• Experience in Network Security, including securing network infrastructure, monitoring, and implementing defenses.
• Hands-on expertise in Vulnerability Assessment, risk analysis, and coordinating remediation activities.
• Experience with GRC frameworks, standards, and tools (e.g., ISO 27001, NIST, PCI DSS, SOC controls) and regulatory compliance.
• Proven ability to design and implement security policies, procedures, and controls aligned with business objectives.
• Strong analytical, problem-solving, and incident management skills, with attention to detail and documentation quality.
• Effective communication and leadership skills, including stakeholder engagement and cross-functional collaboration.