Cyber Security Manager (GRC)

Role Description The Cyber Security Manager (GRC) is a full-time, on-site role based in Navi Mumbai, responsible for overseeing governance, risk, and compliance activities within the organization’s security framework. This role includes developing and maintaining security policies, standards, and procedures aligned with regulatory and industry requirements, and coordinating periodic risk and compliance assessments. The manager will lead efforts in identifying and managing vulnerabilities, monitoring security controls, and ensuring proper documentation and reporting of security posture and incidents. Day-to-day tasks involve collaborating with IT, business, and leadership teams to embed security best practices, conduct security awareness initiatives, and support audits and certifications. The role also includes evaluating security solutions, recommending improvements, and guiding the implementation of security controls across applications, networks, and information assets.
Qualifications
Candidates should possess strong expertise in Application Security, including secure development practices, code review, and application risk management.
Candidates should possess a solid foundation in Cybersecurity and Information Security, with experience in governance, risk, compliance frameworks, and security policies.
Candidates should possess hands-on skills in Network Security, including firewalls, intrusion detection/prevention systems, and secure network architecture.
Candidates should possess practical experience in Vulnerability Assessment, including scanning, analysis, remediation planning, and reporting.
Relevant experience in GRC roles, such as implementing ISO 27001, NIST, or similar frameworks, and supporting internal and external audits.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; professional certifications such as CISSP, CISM, CISA, or CEH are an advantage.
Strong analytical, problem-solving, and documentation skills, with the ability to communicate complex security topics to technical and non-technical stakeholders.
Proven ability to lead cross-functional initiatives, manage multiple priorities, and work effectively in a structured, on-site environment.

Work arrangement
No