Cyber Security GRC Professional

Mahindra Insurance Brokers (MIBL); Mumbai; On-site; INR 1,100,000 - 1,800,000; Full time

Job summary

Mahindra Insurance Brokers (MIBL) in Mumbai seeks an experienced Cyber Security professional to manage governance, risk, and compliance programs. The role focuses on implementing and maintaining security policies, audits, and regulatory adherence across the organization.

The ideal candidate has 4-6 years of experience in Cyber Security, GRC, and risk management, with certifications like ISO 27001 Lead Auditor/Implementer or CEH preferred. Strong stakeholder communication is essential.

Qualifications

• BE/B.Tech with 4-6 years of experience in Cyber Security, GRC, Risk Management, or Compliance.
• Strong understanding of ISO 27001:2022, DPDP Act, IRDAI Cyber Security Guidelines, Third-Party Risk Management, and Security Governance.
• Preferred Certifications: ISO 27001 Lead Auditor/Implementer, CEH.
• Strong stakeholder management, audit, compliance, and reporting skills.

Responsibilities

• Manage Cyber Security policies, procedures, standards, and governance framework
• Drive Risk, Incident, Change, Problem, and Cyber Crisis Management processes
• Ensure compliance with IRDAI regulations, ISO 27001:2022, and DPDP Act requirements
• Conduct cyber security drills, tabletop exercises, and awareness campaigns
• Track security exceptions, vulnerability assessments, application security findings, and remediation activities
• Lead audit readiness and closure for Internal, ISO, and Regulatory audits
• Prepare MIS, KRIs/KPIs, risk dashboards, and Board/CISO presentations
• Manage third-party risk assessments, vendor due diligence, and review security clauses in contracts

Skills

Cyber Security

GRC

Risk Management

Compliance

Stakeholder management

Education

BE/B.Tech

Tools

ISO 27001 Lead Auditor/Implementer

CEH

Job description

Key Responsibilities:

• Manage Cyber Security policies, procedures, standards, and governance framework
• Drive Risk, Incident, Change, Problem, and Cyber Crisis Management processes
• Ensure compliance with IRDAI regulations, ISO 27001:2022, and DPDP Act requirements
• Conduct cyber security drills, tabletop exercises, and awareness campaigns
• Track security exceptions, vulnerability assessments, application security findings, and remediation activities
• Lead audit readiness and closure for Internal, ISO, and Regulatory audits
• Prepare MIS, KRIs/KPIs, risk dashboards, and Board/CISO presentations
• Manage third-party risk assessments, vendor due diligence, and review security clauses in contracts

Desired Profile:

• BE/B.Tech with 4-6 years of experience in Cyber Security, GRC, Risk Management, or Compliance
• Strong understanding of ISO 27001:2022, DPDP Act, IRDAI Cyber Security Guidelines, Third-Party Risk Management, and Security Governance
• Preferred Certifications: ISO 27001 Lead Auditor/Implementer, CEH
• Strong stakeholder management, audit, compliance, and reporting skills