Cybersecurity Governance Specialist

EG A/S; Mangaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Opportunities for personal and professional growth

Focus on wellbeing and inclusion

Collaborative culture

Job summary

A leading enterprise software company seeks a Cybersecurity Governance Specialist in Mangaluru, India. This role involves developing and maintaining the information security governance framework, ensuring compliance with standards like ISO/IEC 27001 and NIST. You will also manage the lifecycle of security policies and design awareness initiatives. Ideal candidates have 3-5 years in Cybersecurity or IT Audit with experience in GRC platforms. This full-time position offers a collaborative environment and opportunities for professional growth.

Qualifications

• 3–5 years of experience in Cybersecurity, IT Audit, or GRC.
• Proven ability in writing and implementing security policies.
• Deep knowledge of ISO/IEC 27001/2, NIST standards, COBIT, or SOC 2.

Responsibilities

• Develop and oversee the organization’s information security framework.
• Manage the lifecycle of information security policies.
• Design security awareness initiatives for all employees.

Skills

Cybersecurity expertise

IT Audit experience

Information security policy writing

Analytical skills

Collaborative mindset

Education

Bachelor’s degree in Computer Science or related field

Tools

GRC platforms (ServiceNow, Archer, OneTrust)

KnowB4

Job description

Cybersecurity Governance Specialist – EG A/S

EG develops enterprise software that empowers clients to focus on their core missions. In this role, you will lead the design and maintenance of the company’s information security framework, ensuring compliance with industry standards and driving a culture of security awareness.

Responsibilities

• Develop, maintain, and oversee the organization’s Information Security Governance Framework, aligning with CIS Controls.
• Own the policy lifecycle: author, review, update, and retire information security policies, standards, and procedures.
• Translate and communicate policies in clear, accessible language to all stakeholders.
• Ensure policies and documents are aligned with CIS Controls and specific organizational requirements.
• Measure implementation progress and monitor compliance across business units.
• Document and manage exceptions or waivers, capturing associated risks.
• Translate governance requirements into actionable training programs.
• Design and deliver security awareness initiatives for employees, developers, administrators, and management.
• Operate the KnowB4 platform for training and phishing campaign delivery.

Required Skills

• 3–5 years of experience in Cybersecurity, IT Audit, or GRC.
• Proven track record in writing and implementing information security policies.
• Deep knowledge of ISO/IEC 27001/2, NIST SP 800‑53, NIST CSF, COBIT, or SOC 2.
• Familiarity with GDPR, CCPA, PCI‑DSS, SOX, and related regulatory requirements.
• Experience with GRC platforms (ServiceNow, Archer, OneTrust, etc.).
• Experience with KnowB4 is an advantage.

Good to Have

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Business Administration, or related field.
• Excellent written and verbal communication skills.
• Strong analytical and problem‑solving abilities.
• Collaborative mindset working cross‑functionally with Legal, IT, HR, and Operations teams.

Preferred Certifications

• CISM, CRISC, CISA, CISSP.

What You Can Expect

• Professional, innovative environment tackling real‑world challenges.
• Collaborative culture with talented colleagues and continuous learning.
• Flexibility to experiment and ownership of ideas that matter.
• Opportunities for personal and professional growth through learning academies.
• Strong focus on wellbeing, inclusion, and competitive benefits.

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Engineering and Information Technology

Industries

Software Development