Cybersecurity Lead - GRC

Medusind Solutions, Inc.; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Medusind Solutions, Inc. is seeking a senior GRC professional to identify, assess, and mitigate risks across IT, business processes, and regulatory compliance.

You will develop and maintain GRC programs, support audits, and ensure corrective actions are implemented to protect information assets. The role requires extensive experience in ISO27001 and SOC 2 audits, knowledge of regulatory requirements, and the ability to work with cross-functional teams to integrate GRC into operations.

Qualifications

• 5+ years of direct experience in information security with focus on risk and compliance.
• 3+ years of ISO27001 and SOC 2 audits and audit responses.
• Understanding of regulatory compliance: ISO27001, SOC 2, NIST, PCI, GDPR, etc.
• Knowledge of identity management, storage, and disaster recovery in cloud and on-premise.
• Knowledge of GRC tools and best practices for risk and compliance.
• Proven track record managing risk/compliance projects.
• Ability to manage third-party audits and compile evidence.
• Strong written communication to develop policies and procedures.
• Strong analytical and problem-solving abilities.

Responsibilities

• Identify, assess, and mitigate risks across IT security, processes, and regulatory compliance.
• Develop, implement, and maintain GRC programs and processes.
• Assist with audits, respond to findings, and ensure corrective actions.
• Perform user access reviews and governance reviews.
• Create and maintain policies and procedures for governance, risk, and compliance.
• Conduct gap analyses and implement frameworks like ISO27001, GDPR, NIST, SOX.
• Develop and revise policies, standards, and guidelines for the organization.
• Conduct vendor risk assessments against security requirements.
• Test and monitor effectiveness of security controls.
• Research threats to aid risk mitigation activities.
• Support inquiries from business units about operational compliance.
• Collaborate with teams to integrate GRC into operations.

Skills

Information security

Risk management

Regulatory compliance

ISO 27001 audits

SOC 2 audits

GRC tools

Identity management

Cloud/On-Prem DR

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

GRC tools

Job description

· Identifying, assessing, and mitigating potential risks across various areas of the organization, including IT security, business processes, and regulatory compliance.

· Developing, implementing, and maintaining GRC programs and processes to support compliance and risk management efforts.

· Assisting with internal and external audits, responding to audit findings, and ensuring corrective actions are implemented.

· User Access review

· Creating and maintaining policies and procedures related to governance, risk, and compliance.

· Conducting gap analysis and implementing frameworks and standards such as ISO 27001, GDPR, NIST, and SOX.

· Developing and revising policies, standards, processes, and guidelines for the organization. · Conducting vendor risk assessments against organizational security requirements.

· Continually testing and monitoring the effectiveness of security controls.

· Conducting research to aid threat assessment or risk mitigation activities.

· Assist the department in responding to inquiries from the business units about ongoing operational compliance

· Working with various teams and departments to ensure GRC practices are integrated into business operations.

Responsibilities

· 5+ years of direct experience in information security, with a main emphasis on risk and compliance

· 3+ years of expertise conducting ISO 27001 and SOC 2 audits, as well as handling audit responses

· Thorough understanding of market structures, including relevant regulatory compliance requirements (ISO27001, SOC 2, NIST, PCI, GDPR, etc.)

· Knowledge of identity management standards, storage, and disaster recovery in the cloud and On Premise

· Knowledge of GRC tool techniques and best practices

· Proven track record of organizing and carrying out several risk and compliance projects

· Ability to successfully manage third-party audits, compile evidence, and organize audit responses

· Effective written communication skills to develop & maintain the policies and procedures; the capability to communicate with cross-functional teams.

· Proven analytical and problem-solving abilities for managing initiatives that advance corporate goals

Qualifications

· Bachelor’s degree in computer science, information systems, or Cybersecurity

About Us

Medusind is a healthcare company, founded in 2002, that provides revenue cycle management (RCM) solutions for medical and dental organizations, helping them maximize revenue and reduce costs through technology and expertise.

Job Info

• Job Identification 163
• Posting Date 12/04/2025, 08:57 AM
• Locations 6th ,4th,3rd Floor,The Great Oasis,, Mumbai, Maharashtra, 400093, IN