Director – Cyber Risk & Compliance

Location - Bangalore
Experience - 15+ years
The role requires a seasoned professional with deep expertise in Technology Risk, IT Assurance, Internal Controls, and Regulatory Compliance. The successful candidate will be responsible for leading client engagements, driving business growth, developing senior client relationships, managing large and complex teams, and delivering high-quality advisory services across industries.
This individual will play a critical leadership role in strengthening Technology Risk offerings, mentoring teams, and helping clients manage technology risks while meeting regulatory and business objectives.
Key Responsibilities
Client Leadership & Relationship Management
Build, develop, and maintain executive-level relationships with C-suite stakeholders, Audit Committees, CIOs, CISOs, CFOs, and Internal Audit leaders.
Serve as a trusted advisor to clients on technology risk, governance, compliance, and internal control matters.
Lead strategic discussions with client executives and proactively identify opportunities for value-added advisory services.
Manage stakeholder expectations effectively while ensuring delivery excellence and client satisfaction.
Support business development activities, including proposal development, client presentations, and practice growth initiatives.
Engagement Leadership
Lead and oversee multiple large-scale client engagements independently from planning through execution and reporting.
Ensure timely delivery of high-quality services while maintaining profitability and adherence to risk management standards.
Provide subject matter expertise across:
SOX ITGC and IT Application Controls Reviews
SOC 1, SOC 2 Assessments
IT Internal Audits
IT Risk Assessments
IT Governance Reviews
Internal Controls Optimization
Technology Compliance Programs
ERP Controls Reviews (SAP, Oracle, Workday, etc.)
Cyber and Technology Risk Advisory Services
Review engagement deliverables and ensure compliance with professional and firm standards.
Practice Development
Contribute to the growth of the Technology Risk practice through capability building and market development initiatives.
Identify emerging technology risk trends and develop innovative service offerings.
Support recruitment, training, and development programs within the practice.
Drive thought leadership through publications, webinars, client workshops, and industry forums.
People Leadership
Lead, mentor, coach, and develop high-performing teams across multiple locations.
Act as a Performance Manager and Career Counselor for team members.
Conduct performance evaluations, provide constructive feedback, and support career development initiatives.
Foster an inclusive, collaborative, and high-performance culture.
Manage resource planning, utilization, and team development activities.
Candidate Profile
Experience
Minimum 15 years of relevant professional experience in Technology Risk Consulting, IT Assurance, IT Audit, or Risk Advisory.
Experience working with a leading multinational consulting firm or Big Four organization is highly preferred.
Demonstrated experience managing large client engagements and complex stakeholder environments.
Proven track record of independently leading engagement teams and delivering strategic client outcomes.
Strong experience building and nurturing senior-level client relationships.
Experience managing geographically distributed teams and leading performance management processes.
Technical Expertise
Strong hands-on and leadership experience in:
SOX Compliance Programs
IT General Controls (ITGC)
IT Application Controls (ITAC)
SOC 1, SOC 2 Audits and Advisory
IT Internal Audits
Technology Risk Management
Internal Controls Frameworks
COBIT, COSO and Risk Frameworks
ERP Controls Assessment (SAP, Oracle, Workday, etc.)
Regulatory Compliance and Governance
Educational Qualifications & Certifications
Mandatory
Bachelor's degree in Accounting, Information Systems, Computer Science, Engineering, or related discipline.
Active US CPA (Certified Public Accountant) License [Mandatory]
CISA (Certified Information Systems Auditor)
Preferred
CISSP
CRISC
CIA
CGEIT

Work arrangement
No