Cyber GRC Manager

Bottomline Technologies, Inc.; India; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Bottomline Technologies, Inc. in India is seeking a Cyber GRC Manager to lead governance, risk, and compliance programs and to elevate security assurance for clients and regulators.

You will partner across product, technology, operations, and legal teams to mature Bottomline's information security posture and drive AI governance initiatives within the organization.

Qualifications

• Bachelor’s degree in risk management, cybersecurity, technology or equivalent.
• Professional certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent.

Responsibilities

• Governance: Develop, maintain, and execute the information security governance program with policies and controls.
• Risk Management: Manage cyber risk program, risk assessments, and executive risk reporting.
• Compliance & Regulatory Oversight: Lead regulatory assessments and audit readiness across the org.
• Client & Security Assurance: Oversee customer security engagements and due diligence reviews.
• People Leadership: Lead and develop a team of Cyber GRC professionals.
• AI Governance & Innovation: Govern AI technologies and manage AI-related risks.

Skills

Governance

Risk management

Compliance

Regulatory frameworks

Leadership

AI governance

Education

Bachelor’s degree in risk management, cybersecurity, technology or equivalent

Job description

Are you ready to transform the way businesses pay and get paid? Bottomline is a global leader in business payments and cash management, with over 35 years of experience and moving more than $16 trillion in payments annually. We're looking for passionate individuals to join our team and help drive impactful results for our customers. If you're dedicated to delighting customers and promoting growth and innovation - we want you on our team!

Job Description

Job Title:

Cyber GRC Manager

Job Family:

Cyber GRC

Job Level

M3

Location

India

Job Description

Job Summary

This role reports to the Information Security Governance, Risk and Compliance (GRC) Senior Director and partners across Product, Technology, Operations, Legal, Compliance, and Business teams to strengthen and mature Bottomline's information security, risk, and compliance programs.

As the Information Cyber GRC Manager, you will serve as a strategic leader responsible for driving governance, risk management, compliance oversight, and client assurance initiatives. You will build trust and confidence among customers, regulators, auditors, and executive leadership regarding Bottomline's security posture while leading a team of GRC professionals. This role requires a forward-looking mindset, including the ability to assess and manage emerging risks associated with Artificial Intelligence (AI) and support the responsible adoption of AI technologies across the organization.

Essential Functions and Responsibilities:

• Governance: Lead the development, maintenance, and execution of the information security governance program, including policies, standards, and controls aligned with regulatory requirements and industry frameworks (e.g., SWIFT, NACHA, PCI DSS, NIST, GLBA).
• Risk Management: Own the cyber risk management program, including oversight of the risk register, risk assessments, risk treatment plans, and executive reporting. Review and approve risk acceptance decisions using a risk-based approach.
• Compliance & Regulatory Oversight: Lead compliance activities and assessments to ensure adherence to regulatory, contractual, and industry requirements. Drive audit readiness and remediation efforts across the organization.
• Client & Security Assurance: Oversee customer security and compliance engagements, including due diligence reviews, security questionnaires, contract reviews, and client assurance activities. Act as a trusted advisor on information security and risk matters.
• People Leadership: Lead, mentor, and develop a team of Cyber GRC professionals. Establish priorities, manage performance, allocate resources, and drive execution of strategic and operational objectives while fostering a high-performing team culture.
• AI Governance & Innovation: Lead the evaluation and governance of Artificial Intelligence (AI) technologies and associated risks across the organization. Establish AI risk assessment practices, support responsible AI adoption, and stay at the forefront of emerging AI capabilities, regulatory developments, and industry trends to enhance security, compliance, and operational effectiveness.

Required Experience & Qualifications

• Bachelor’s degree in risk management, cybersecurity, technology or equivalent

Preferred Experience & Qualifications

• Professional certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent.
• Strong knowledge of regulatory and industry frameworks including SWIFT, NACHA, PCI DSS, NIST, and GLBA.
• Experience with AI governance frameworks, AI risk management, and emerging regulatory requirements related to Artificial Intelligence.
• Experience leveraging automation, analytics, and AI-driven capabilities within security, risk, and compliance programs.

Note: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position.

We welcome talent at all career stages and are dedicated to understanding and supporting additional needs. We're proud to be an equal opportunity employer, committed to creating an inclusive and open environment for everyone.