Information Security GRC Manager

Mount Talent Consulting; Mumbai; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Mount Talent Consulting is seeking an experienced GRC professional with 8-10 years in information security, risk, compliance, or audit to lead governance, risk management, and compliance efforts in an ISO 27001 environment.

The role emphasizes policy development, third-party risk management, and stakeholder communication, requiring strong analytical and presentation skills in a fast-paced consulting setting.

Qualifications

• 8-10 years of experience in Information Security, Risk, Compliance, or Audit.
• Minimum 4-5 years of dedicated GRC experience in ISO 27001 environments.
• Experience conducting risk assessments, audits, and compliance reviews.

Responsibilities

• Lead GRC program activities including risk assessments and control testing.
• Oversee policy development, governance reporting, and stakeholder engagement.
• Coordinate third-party risk management and vendor assessments.
• Support ISMS governance and compliance initiatives in an ISO 27001 setup.

Skills

DLP

EDR

NGAV

CASB

PAM

PIM

Firewalls

WAF

Email Security

Proxy

Cloud Security

Risk management

Compliance assessment

Security governance

Analytical skills

Stakeholder management

Communication

Job description

Role & responsibilities

• 8-10 years of experience in Information Security, Risk, Compliance, or Audit.
• Minimum 4-5 years of dedicated GRC experience. Hands-on experience managing ISMS in an ISO 27001-certified environment.
• Experience conducting risk assessments, audits, and compliance reviews.
• Exposure to Third-Party Risk Management (TPRM) and vendor assessments.
• Experience in policy development, governance reporting, and stakeholder management.

Preferred candidate profile

• Strong understanding of security technologies such as DLP, EDR, NGAV, CASB,PAM/PIM, Firewalls, WAF, Email Security, Proxy, and Cloud Security.
• Expertise in risk management, compliance assessment, and security governance.
• Strong analytical, problem-solving, and reporting skills.
• Excellent communication, stakeholder management, and presentation abilities.
• Ability to translate technical security requirements into business-focused recommendations.
• Self-motivated, proactive, and capable of working in a fast-paced environment.