Cyber security GRC Manager

Cyber Security Manager
Location: Sanpada, Navi Mumbai
Experience: 8+ Years (Relevant)
Role Overview
We are looking for an experienced Cyber Security Manager with strong expertise in Governance, Risk & Compliance (GRC), Information Security Documentation, and Cyber Risk Management to manage and strengthen the organization's information security framework.
Key Responsibilities
Lead cybersecurity GRC initiatives aligned with ISO 27001, NIST, and applicable security standards.
Conduct security risk assessments, control assessments, compliance reviews, and risk mitigation activities.
Manage internal and external audits, track observations, and ensure timely closure of compliance gaps.
Develop and maintain Information Security Policies, SOPs, Standards, Guidelines, and Procedures.
Prepare audit evidence, risk registers, MIS reports, security dashboards, and management presentations.
Oversee SOC/SIEM operations, incident response, and security monitoring.
Provide governance and oversight for IAM/PAM, VAPT, SSE, DLP, endpoint security, data privacy, and data security.
Coordinate with IT, business teams, auditors, and external vendors on security initiatives.
Support OT/ICS security assessments and risk mitigation activities.
Mandatory Skills
7+ years of relevant experience in Cyber Security / Information Security / GRC / Cyber Risk.
Strong hands-on experience in GRC and security documentation.
Practical experience with ISO 27001, NIST, risk assessments, and audit management.
Excellent skills in developing security policies, SOPs, compliance reports, and presentations.
Good understanding of incident response, SOC, IAM/PAM, VAPT, and security technologies.
Strong stakeholder management, analytical, and communication skills.
Preferred Certifications
CISM, ISO 27001 Lead Implementer/Lead Auditor, CISA, CEH, Security+, or equivalent certifications.

Work arrangement
No