Director, IT Governance, Risk & Compliance (GRC)

remote zest jobs; India; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

MCG is seeking an experienced IT GRC leader to drive governance, risk and compliance across enterprise IT. The role interfaces with executive leadership to align risk management with business objectives and regulatory requirements.

The ideal candidate brings 10+ years in IT, cybersecurity, audit, risk, or compliance, plus 5+ years in leadership. Strong knowledge of frameworks like NIST, ISO 27001, and SOC is required.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration, or a related field.
• Master's degree preferred.
• 10+ years of IT, cybersecurity, audit, risk, or compliance experience.
• 5+ years in leadership or management roles.
• Experience leading enterprise GRC programs.
• Experience with regulatory compliance and governance frameworks.

Responsibilities

• Govern governance and enterprise IT GRC programs and roadmaps.
• Establish governance structures, policies, standards, and procedures for IT and cybersecurity.
• Present risk, compliance, and governance updates to executives and committees.
• Lead enterprise IT risk assessments and risk treatment programs.
• Coordinate remediation plans for compliance findings.
• Coordinate audits and ensure evidence collection and audit readiness.
• Manage GRC budgets, vendors, and consulting engagements.

Skills

IT GRC

Cybersecurity

Audit

Risk Management

Regulatory Compliance

Leadership

Education

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration

Master's degree preferred

Tools

GRC Platforms

Policy Management

Job description

Company Description

reputed company (MCG) is an end-to-end power solutions and services provider that accelerates time-to-power and delivers reputed company, resilient infrastructure for mission critical environments. By integrating engineering, manufacturing, reputed company deployment, and lifecycle services under one platform, we streamline execution and bring reputed company projects online faster - without compromising performance. With more than 1.5 reputed company reputed company feet of U.S. manufacturing reputed company, MCG supports data centers, power reputed company, reputed company, oil & gas, pharmaceuticals, semiconductors, and industrial facilities where uptime is non-negotiable. reputed company designs, manufactures and provides value-added services for customers requiring critical power solutions. Powering a new electric world for a brighter, more secure reputed company.

Job Description

Key Responsibilities

Governance & reputed company

• reputed company and maintain the enterprise IT GRC reputed company, reputed company, and roadmap.
• Establish governance structures, policies, standards, and procedures for IT and cybersecurity.
• Present risk, compliance, and governance updates to executive leadership and governance committees.
• Align IT risk management initiatives with business objectives and organizational priorities.
• Drive reputed company improvement of governance and control processes.

Risk Management

• Lead enterprise IT risk assessments and risk treatment programs.
• Identify, assess, monitor, and report technology and cybersecurity risks.
• Maintain IT risk registers and reputed company remediation efforts.
• Facilitate reputed company-party/vendor risk management programs.
• reputed company key risk indicators (KRIs) and risk reporting metrics.

Compliance Management

• Ensure compliance with applicable regulations and frameworks such as:NIST Cybersecurity reputed company (CSF)
• NIST 800-53
• ISO 27001
• SOC 1 / SOC 2
• PCI-reputed company
• HIPAA
• GDPR
• SOX IT General Controls (ITGC)
• CIS Controls
• Manage compliance assessments, audits, and certification activities.
• Track regulatory changes and evaluate organizational impact.
• Coordinate remediation plans for compliance findings.

Audit & Controls

• Serve as the primary reputed company for reputed company auditors.
• reputed company and maintain IT control frameworks and documentation.
• reputed company testing of IT General Controls (ITGCs) and reputed company controls.
• Monitor corrective actions resulting from audits and assessments.
• Ensure evidence collection and audit readiness across IT functions.

Governance

• reputed company Governance
• Collaborate with cybersecurity leadership on reputed company governance initiatives.
• Support reputed company awareness and policy compliance programs.
• Measure control effectiveness through metrics and reporting.
• Participate in incident response reviews and post-incident risk assessments.
• Promote a culture of reputed company and accountability throughout the organization.

Leadership & Team Management

• Build, mentor, and lead IT GRC professionals.
• Establish departmental goals, KPIs, and performance metrics.
• Manage GRC budgets, vendors, and consulting engagements.
• Foster collaboration among IT, reputed company, Legal, Privacy, Internal Audit, and business reputed company.

Qualifications

Required Qualifications

Education

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration, or reputed company field.
• Master's degree preferred.

Experience

• 10+ years of reputed company IT, cybersecurity, audit, risk, or compliance experience.
• 5+ years in a leadership or management role.
• Experience leading enterprise GRC programs.
• Demonstrated experience with regulatory compliance and reputed company frameworks.
• Experience working with executive leadership and audit committees.

Certifications (Preferred)

• CISSP (Certified Information Systems reputed company Professional)
• CISM (Certified Information reputed company Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CGEIT (Certified in Governance of Enterprise IT)
• CISA (Certified Information Systems Auditor)
• ISO 27001 Lead Auditor or Lead Implementer

Technical Competencies

• Enterprise Risk Management (reputed company)
• IT Governance Frameworks
• Cybersecurity Risk Assessment Methodologies
• Audit and Control Testing
• reputed company-Party Risk Management
• Policy Development and Management
• reputed company and Compliance Monitoring Tools
• Governance, Risk & Compliance Platforms (reputed company, reputed company GRC, reputed company, reputed company, reputed company, etc.)
• Metrics, Reporting, and Executive Dashboard Development

Leadership Competencies

• Strategic Thinking
• Executive Communication
• Cross-Functional Collaboration
• Program Management
• Change Management
• Decision-Making Under Risk
• Team Development and Coaching
• Stakeholder Relationship Management