Cyber security GRC Manager

Designation: Cyber Security Manager
Job Location: Navi Mumbai
Position Overview
We are looking for an experienced Cyber Security Manager to lead and manage the organization's cyber security, information security governance, risk and compliance framework. The role will have a strong focus on GRC, ISO 27001/NIST frameworks, security policies and documentation, along with oversight of incident response, security technologies, IAM/PAM, VAPT and OT security.
The ideal candidate should be a GRC-focused Cyber Security professional with strong hands-on understanding of ISO 27001/NIST, risk management, audits, security policies and documentation, while having knowledge of SOC, incident response, IAM, PAM, VAPT, SSE, DLP, Endpoint Security, Data Privacy, Data Security and OT security to effectively oversee the overall cyber security function.
Key Responsibilities
1. Governance, Risk & Compliance – 40%
Lead and manage the organization's Information Security Governance, Risk & Compliance (GRC) framework.
Develop, implement and maintain security controls aligned with ISO 27001, NIST Cybersecurity Framework and other applicable standards.
Drive information security risk assessments, control assessments and risk treatment plans.
Manage internal and external ISO 27001 audits, compliance assessments and closure of audit observations.
Identify cyber security gaps and recommend appropriate remediation plans.
Maintain risk registers, compliance trackers, control matrices and security dashboards.
Coordinate with business and IT teams to ensure compliance with defined security policies and controls.
Monitor regulatory and industry requirements relevant to information and cyber security.
Support management in preparing cyber security governance reports and risk updates.
2. Documentation
Develop, review and maintain Information Security Policies, Standards, SOPs, Guidelines and Procedures.
Prepare security frameworks, process documents, control documents and implementation guidelines.
Create management presentations, MIS reports, security dashboards and audit-related documentation.
Ensure security documentation is current, accurate and aligned with organizational requirements.
Maintain evidence and documentation required for audits and compliance assessments.
6. Communication & Stakeholder Management
Act as a key point of contact for cyber security matters across IT and business functions.
Communicate cyber security risks, incidents and compliance requirements effectively to senior management.
Conduct security awareness sessions and communicate information security policies across the organization.
Coordinate with internal stakeholders, auditors, consultants and external security vendors.
Prepare and present security updates, risk reports and compliance status to management.
3. SOC/SIEM & Incident Response
Oversee security monitoring and incident response,
including SOC operations and continuous improvements.
4. IAM / PAM / VAPT & Security Technologies
Provide governance and oversight for
IAM, PAM, VAPT, SSE, DLP, Endpoint Security, Data Privacy and Data Security
Evaluate and provide recommendations on relevant cyber security technologies and solutions.
5. OT Security –
Support the implementation of OT/ICS security controls and identify cybersecurity risks in operational technology environments.
Coordinate with OT, Engineering, and IT teams to implement security assessments, access controls, monitoring, and risk mitigation measures.
Required Skills & Competencies
Strong knowledge of GRC and security documentation.
Good understanding of cybersecurity and information security principles.
Hands-on experience implementing ISO/IEC 27001 and NIST frameworks.
Experience in security risk assessments, compliance, and audit management.
Expertise in developing Policies, SOPs, and Presentations.
Understanding of SOC operations and incident response processes.
Understanding of IAM, PAM, VAPT, SSE, DLP, Endpoint Security, Data Privacy and Data Security.
Familiarity with OT/ICS security concepts is an added advantage.
Strong analytical, problem-solving, and risk management skills.
Excellent written and verbal communication skills.
bility to work independently and manage multiple security initiatives simultaneously.

Work arrangement
No