Assistant Manager - Information Security/ IT GRC

KVAT & Co; Thane; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

KVAT & Co is seeking a highly skilled Assistant Manager - Information Security/ IT GRC for its Governance, Risk, and Compliance - Technology (GRC-T) practice. The role will lead Information Security, Cybersecurity, and Data Privacy projects and guide clients on regulatory compliance.

This client-facing position requires executive presence, leadership, and deep technical expertise in IT GRC. You will independently manage projects and client engagements, contributing to strategic security programs.

Qualifications

• Bachelor's in related fields.
• Any additional certifications will serve as an added advantage.
• 5+ years of experience in Information Security, Cybersecurity, and IT GRC.
• Experience handling projects independently and client interactions.
• Prior consulting firms or IT security advisory firms experience is an added advantage.

Responsibilities

• Cybersecurity & Information Security Assessments: Conduct comprehensive cybersecurity reviews for clients.
• Security Implementation & Monitoring: Act as an implementation partner for information security controls and oversee the implementation process.
• Regulatory compliance support: RBI, IRDAI, SEBI, GDPR, DPDP, SOX compliance.
• Policy Drafting & IT Risk Management: Develop information security policies and conduct IT risk assessments.
• Client & Team Management: Serve as a point of contact for clients and lead engagements.
• Business Development & Stakeholder Engagement: Develop decks and present service offerings to prospective clients.

Skills

Cybersecurity frameworks

IT GRC

Regulatory compliance

Client handling

Project management

Policy drafting

Education

Bachelor's in related fields

Job description

Job Title: Assistant Manager - Information Security/ IT GRC

Base Location: Thane/ Mumbai

Employment Type: Full-Time/ Contractual

Reporting To: Partner

Firm Overview: KVAT & Co, a business consulting and auditing firm with deep expertise in corporate governance, risk management, compliance, monitoring services, technology, and training. Established in 2021, our firm has rapidly evolved from a pioneering partnership between two visionary leaders to a robust team of seasoned professionals with a diverse industry presence. Our operational capacity has expanded significantly to accommodate the increasing demands of clientele which are some of the leading organizations in the diverse industry segments. We continue to scale our services to deliver unparalleled solutions tailored to meet and exceed the evolving needs of our clients. We have forged strategic alliances in India, the Kingdom of Saudi Arabia, the United Arab Emirates and Cameroon enhancing our capability to serve a global clientele effectively. With a registered office in India, our international perspective ensures that we provide comprehensive solutions that meet global standards.

Job Summary

KVAT & Co is seeking a highly skilled and experienced Assistant Manager - Information Security/ IT GRC for its Governance, Risk, and Compliance - Technology (GRC-T) practice. The ideal candidate will be responsible for executing and leading Information Security, Cybersecurity, and Data Privacy projects, ensuring compliance with regulatory standards, and providing strategic guidance to clients. This is a client-facing role requiring strong executive presence, leadership abilities, and technical expertise in the domain.

The candidate should be able to independently manage projects and lead client engagements.

Key Responsibilities

• Cybersecurity & Information Security Assessments:
• Conduct comprehensive cybersecurity reviews for clients.
• Perform gap assessments against leading security frameworks (ISO 27001, NIST, CIS, etc.).
• Evaluate existing information security controls and recommend remediation measures.
• Security Implementation & Monitoring:
• Act as an implementation partner for information security controls and frameworks.
• Oversee and monitor the implementation process to ensure adherence to industry best practices.
• Support organizations in achieving compliance with regulatory frameworks (RBI, IRDAI, SEBI, GDPR, DPDP, SOX, etc.).
• Policy Drafting & IT Risk Management:
• Develop and draft information security policies for clients as per industry standards.
• Conduct IT risk assessments to identify vulnerabilities and threats.
• Develop risk mitigation strategies to enhance IT governance frameworks.
• Security Testing & Third-Party Risk Assessments:
• Provide support in vulnerability assessments & penetration testing (VAPT).
• Conduct third-party IT risk assessments and vendor information security reviews.
• Data Privacy & Regulatory Compliance:
• Assist in GDPR compliance assessments and implementation projects.
• In-depth understanding of DPDP (Digital Personal Data Protection) framework and Indian data privacy laws.
• Stay updated with IRDAI, RBI, SEBI master circulars, and cybersecurity regulations to ensure compliance.
• Client & Team Management:
• Serve as a point of contact for clients on information security project execution.
• Conduct awareness sessions for clients
• Assist in presentations for clients.
• Business Development & Stakeholder Engagement:
• Develop decks, case study-based proposals, and service presentations.
• Present service offerings and project-based case studies to prospective clients.
• Lead discussions with CXOs, CIOs, and other senior stakeholders on cybersecurity matters.

Key Skills & Competencies

• Technical Expertise: Strong knowledge of cybersecurity frameworks, risk management, and IT governance.
• Regulatory Understanding: Hands-on experience with GDPR, DPDP, RBI, IRDAI, SEBI, SOX and relevant cybersecurity guidelines.
• Communication & Presentation: Ability to clearly articulate cybersecurity strategies and deliver high-impact presentations to clients.
• Leadership & Client Handling: Prior experience in a client-facing role with the ability to manage projects independently.
• Report Writing & Documentation: Strong reporting, policy drafting, and technical documentation skills.
• Project Management: Ability to plan, execute, and ensure timely delivery of IT GRC projects.
• Business Acumen: Experience in service pitching, proposal drafting, and stakeholder engagement.

Required Qualifications & Experience

Educational Background

• Bachelor's in related fields
• Any additional certifications will serve as an added advantage.

Experience

• 5+ years of experience in Information Security, Cybersecurity, and IT GRC domains.
• Proven track record of handling projects independently and client interactions.
• Prior experience in consulting firms or IT security advisory firms is an added advantage.

CTC: As per industry standards and experience

Why Join KVAT & Co?

Opportunity to lead the projects

High visibility role with direct client exposure and impact.

Work on diverse industry sectors, handling cutting-edge cybersecurity projects.

Collaborative and growth-oriented work environment.

Skills: iso,cism,information security,irdai,security,cisa,it grc,sebi regulations,cybersecurity,sox compliance,it,risk,rbi,grc,pfrda