Cyber Security Manager - GRC

Role Description The Cyber Security Manager - GRC will lead the design, implementation, and oversight of governance, risk, and compliance frameworks across the organization’s technology and information assets. This is a full-time, on-site role based in Navi Mumbai, where the manager will work closely with cross-functional teams to define security policies, standards, and procedures aligned with regulatory and industry requirements. Day-to-day responsibilities include assessing security risks, managing vulnerability assessments, coordinating security audits, and recommending remediation plans. The role also involves monitoring application, network, and information security controls, preparing reports for leadership, and driving continuous improvement in cyber security posture. The manager will provide guidance to internal stakeholders, support incident response activities, and promote security awareness across the organization.
Qualifications
Strong expertise in Cybersecurity and Information Security, with experience implementing GRC frameworks and security policies.
Knowledge of Application Security, including secure development practices, code review, and protection against common application threats.
Hands-on experience in Network Security, including firewalls, IDS/IPS, VPNs, and secure network architecture design.
Proficiency in Vulnerability Assessment, risk analysis, and remediation planning for infrastructure, applications, and cloud environments.
Familiarity with relevant standards and regulations (e.g., ISO 27001, NIST, PCI-DSS, GDPR or similar) and audit processes.
Strong analytical, problem-solving, and decision-making skills, with the ability to communicate complex security topics clearly to non-technical stakeholders.
Experience leading security initiatives or teams, with a collaborative approach to working with IT, operations, and business units.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; relevant certifications (e.g., CISSP, CISM, CISA, ISO 27001 Lead Implementer) are an advantage.

Work arrangement
No