Governance, Risk & Compliance (GRC) Expert

Vrinda International; Bengaluru; Sur place; INR 1 200 000 - 1 800 000; Plein temps

Résumé du poste

Vrinda International seeks a seasoned Governance, Risk & Compliance (GRC) Expert to lead strategic initiatives. The role focuses on safeguarding assets, ensuring regulatory adherence, and strengthening the security posture through risk management, ISMS deployment, and staff cybersecurity awareness.

The candidate will advise leadership, drive governance frameworks, and coordinate with business units to maintain ongoing compliance with ISO 27001, NIST CSF, GovS 007 and related standards, while

Qualifications

• 3–6 years of IT services experience in governance, risk and compliance roles.
• Deep expertise in third-party risk management and information asset management.
• Experience delivering cybersecurity awareness programs and leading security projects.
• Up-to-date knowledge of GDPR and other regulatory requirements affecting data privacy and security.
• Familiarity with ISO 27001, NIST CSF, GovS 007 and Cyber Essentials.

Responsabilités

• Lead third‑party vendor risk management and ensure partner security standards.
• Oversee information asset management including data classification and governance.
• Design and run enterprise cybersecurity awareness programs for staff.
• Drive security projects from concept to delivery aligning with business goals.
• Interpret GDPR and regulatory requirements to maintain legal compliance across units.
• Develop and enforce information security policies, standards and governance frameworks.
• Oversee ISMS implementation and security controls deployment.
• Conduct cyber risk assessments and implement mitigation strategies.
• Maintain continual compliance with ISO 27001, NIST CSF and other standards.

Connaissances

GRC Expertise

Third-Party Risk

Info Asset Mgmt

Cyber Awareness

Security Projects

GDPR Knowledge

ISMS Governance

Description du poste

Governance, Risk & Compliance (GRC) Expert

Job Description

Summary

We are seeking a seasoned Governance, Risk & Compliance (GRC) Expert to lead our strategic initiatives in safeguarding organizational assets and ensuring adherence to global regulatory frameworks. This pivotal role is dedicated to fortifying our security posture by overseeing comprehensive risk management protocols, driving the implementation of robust information security management systems, and fostering a culture of cybersecurity awareness across the enterprise. The successful candidate will serve as a critical advisor to leadership, ensuring that all operations align with industry best practices and legal mandates while mitigating potential threats through proactive assessment and control strategies.

Responsibilities

• Spearhead the management of third-party vendor risks, ensuring all external partners meet our stringent security and compliance standards.
  
• Direct the lifecycle of information asset management, maintaining strict oversight of data classification, protection, and governance.
  
• Design and execute enterprise-wide cybersecurity awareness programs to educate staff on threat recognition and secure behavior.
  
• Lead complex security-focused projects from conception to completion, ensuring timely delivery and alignment with business objectives.
  
• Interpret and apply GDPR and other regulatory requirements to maintain full legal compliance across all business units.
  
• Develop, update, and enforce information security policies, standards, and governance frameworks to support organizational resilience.
  
• Oversee the end-to-end implementation of Information Security Management Systems (ISMS) and the deployment of necessary security controls.
  
• Conduct thorough cyber risk assessments to identify vulnerabilities, followed by the execution of targeted mitigation strategies to reduce exposure.
  
• Ensure continuous compliance with international standards including ISO 27001, NIST Cybersecurity Framework, GovS 007, and Cyber Essentials.
  

Requirements

Requirements:

• Possess 3-6 years of professional experience within the IT Services sector, with a proven track record in governance, risk, and compliance functions.
  
• Demonstrate deep expertise in Third-Party Risk Management and Information Asset Management methodologies.
  
• Show strong capability in delivering Cybersecurity Awareness & Training initiatives and managing Security Projects effectively.
  
• Maintain up-to-date knowledge of GDPR and other critical regulatory requirements affecting data privacy and security.
  
• Exhibit proficiency in establishing Information Security Governance, drafting Policies & Standards, and implementing ISMS frameworks.
  
• Have hands‑on experience with Security Controls, performing Cyber Risk Assessments, and driving Mitigation & Compliance programs.
  
• Be well‑versed in major compliance standards such as ISO 27001, NIST CSF, GovS 007, and Cyber Essentials.