Information Security and GRC Lead

ConveGenius; Dadri; On-site; INR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Health insurance

On-ground presence across India

Mission-driven culture

Job summary

ConveGenius seeks an Information Security and GRC Lead to own governance, risk, compliance, privacy, and AI governance across platforms. You will build the enterprise GRC framework, ensure regulatory obligations are met, manage risk, and embed a security‑first culture in processes.

This role demands ownership, hands‑on execution, and fast iterations during early setup. This is a 0‑to‑1 build with ambiguity, requiring high initiative, cross‑functional collaboration, and strategic impact across

Qualifications

• Strong program management of GRC, information security, and privacy.
• Deep knowledge of regulatory compliance, audit frameworks, and risk assessment.
• Experience implementing security policies, controls, and governance in large orgs.
• Solid understanding of data privacy, cybersecurity, and regulatory requirements.
• Experience with internal/external audits and remediation programs.
• Ability to identify, assess, and mitigate technology and operational risks.
• Excellent stakeholder management across business, tech, and leadership.
• Ability to establish metrics, reporting frameworks, and risk dashboards.

Responsibilities

• Build and own the enterprise GRC framework: governance structure, risk register, compliance calendar, control library.
• Lead compliance initiatives across ISO 27001, SOC2, DPDP Act, IT Act, and government sectors.
• Manage end-to-end audits: internal, external certifications, government reviews and remediation tracking.
• Define privacy governance standards: data classification, retention, consent, and DPDP compliance.
• Establish AI governance frameworks with AI security and platform teams.
• Drive policy creation, review cycles, and compliance reporting for stakeholders.
• Identify, assess, and mitigate technology, security, and operational risks across functions.
• Build and maintain compliance metrics, risk dashboards, and leadership reporting.
• Manage stakeholder relationships across business, technology, legal, and leadership teams on GRC matters.

Skills

GRC

ISO 27001

SOC 2

DPDP Act

Privacy governance

Audits

Regulatory compliance

Risk management

Stakeholder management

Governance reporting

Job description

Does working for 150+ million children of Bharat excite you?

Then this opportunity is for you!

About us:

ConveGenius is an AI-native education infrastructure company transforming how governments, enterprises, and social institutions deliver learning and governance outcomes at population scale. Operating across B2G and B2B segments, the company partners with state governments, CSR funders, philanthropies, and social enterprises to build intelligent education ecosystems that are both impactful and commercially sustainable.

At its core, ConveGenius runs two synergistic business lines:

• SwiftAI – the intelligence and automation layer that powers citizen engagement, governance efficiency, and real-time decision‑making for governments and institutions.
• SwiftSchool – the learning infrastructure layer that integrates adaptive learning, digital classrooms, and analytics to drive measurable student and system outcomes.

This dual‑engine model enables ConveGenius to serve as the technology backbone for education reform — connecting classrooms, communities, and command centres through a unified AI‑powered framework. Unlike traditional edtech companies that deliver content, ConveGenius builds infrastructure — platforms that integrate deeply into public delivery systems while enabling private and philanthropic partners to scale their missions with measurable results.

With operations across 22+ Indian states and partnerships with multilaterals, CSR alliances, and government departments, ConveGenius has established itself as a partner‑friendly enterprise trusted for aligning policy priorities with social and financial returns. Supported by institutional investors and guided by a double bottom line philosophy, the company consistently delivers impact at scale and profitability with purpose.

As ConveGenius enters its next phase of growth, it is shaping the future of AI‑led public education infrastructure — where technology, partnerships, and governance intelligence converge to redefine how nations learn and thrive.

Role Overview:

As the Information Security and GRC Lead, you will own governance, risk management, compliance, privacy, information security governance, and AI governance across platforms. You will build the enterprise GRC framework that ensures the platform meets its regulatory obligations, manages risk systematically, and embeds a security‑first culture into its processes. This role is a part of 0‑to‑1 vertical build. The person joining should be comfortable with ambiguity, high ownership, rapid iteration, hands‑on execution, team building and periods of high intensity work during the early set up phase.

Key Responsibilities:

• Build and own the enterprise GRC framework: governance structure, risk register, compliance calendar, and control library.
• Lead compliance initiatives across applicable frameworks: ISO 27001, SOC2, DPDP Act, IT Act, and government sector requirements.
• Manage audits end‑to‑end: internal audits, external certifications, government audits, and remediation tracking.
• Define privacy governance standards: data classification, retention policies, consent frameworks, and DPDP compliance.
• Establish AI governance frameworks in collaboration with AI security and platform teams.
• Drive policy creation, review cycles, and compliance reporting for internal and external stakeholders.
• Identify, assess, and mitigate technology, security, and operational risks across all business and engineering functions.
• Build and maintain compliance metrics, risk dashboards, and reporting frameworks for leadership and board‑level visibility.
• Manage stakeholder relationships across business, technology, legal, and leadership teams on all GRC matters.

Must-have skills:

• Strong experience in Governance, Risk Management, Compliance, and Information Security programs
• Deep understanding of regulatory compliance, audit frameworks, and risk assessment methodologies
• Experience implementing security policies, controls, standards, and governance processes across large organizations
• Strong knowledge of data privacy, cybersecurity, and regulatory requirements
• Experience managing internal/external audits, compliance reviews, and remediation programs
• Ability to identify, assess, and mitigate technology, security, and operational risks
• Strong stakeholder management skills with experience working across business, technology, and leadership teams
• Experience establishing compliance metrics, reporting frameworks, and risk dashboards

What We Offer and Why You Should Join ConveGenius

At ConveGenius, we create an environment where purpose meets growth. You will be part of a mission driven organization that is transforming how learning reaches children across India, especially at scale and where it matters most.

• Work with a diverse and passionate team spread across India, bringing together people from different backgrounds, perspectives, and expertise.
• Be part of an organization with a strong on ground presence across more than two thirds of India, giving you exposure to large scale, real world impact.
• Play a meaningful role in strengthening the education ecosystem and contributing directly to learning outcomes for millions of children.
• Gain experience working at the intersection of education, technology, and public systems, building skills that are highly relevant and future focused.
• Work in a culture that values ownership, learning, and collaboration, with space to take initiative and grow professionally.
• Enjoy stability and peace of mind with employee friendly benefits, including health insurance coverage and other supportive policies.
• If you are driven by purpose, enjoy solving complex problems, and want your work to create visible impact, ConveGenius offers a place to grow while making a difference.