IT&Data Risk & CS Manager

Infosys Limited; Telangana; On-site; INR 180,000 - 300,000; Full time

Job summary

Infosys Limited in Telangana is seeking an experienced cyber risk governance professional with 6–8 years of expertise in risk management, governance, and compliance. The role involves maintaining the cyber risk management framework, managing risk registers, and aligning with enterprise standards.

You will conduct risk assessments across applications, infrastructure, cloud platforms, and third-party services, drive remediation tracking, and prepare regular dashboards for leadership; collaboration

Qualifications

• Experience with cyber risk management and GRC processes.
• Ability to manage risk registers, KRIs and KPIs, with remediation tracking.
• Strong understanding of information security and cybersecurity principles.

Responsibilities

• Cyber Risk Governance: maintain and execute the Cyber Risk Management Framework and governance processes.
• Risk Assessment & Monitoring: conduct cyber risk assessments for apps, infra, cloud, projects, and third-party services; track risk treatment plans.
• Control Assurance & Compliance: manage security risk exceptions and compensating controls; ensure alignment with standards (ISO 27001, NIST, CIS, GDPR, DORA, NIS2).
• Reporting & Stakeholder Management: prepare risk reports and dashboards for management; present exposure and remediation progress to stakeholders.

Skills

Cyber risk management

Risk assessment

Governance

GRC

ISO 27001

NIST CSF

CIS Controls

GDPR

DORA

NIS2

Power BI

Tableau

Excel advanced analytics

Education

MCA

Bachelor of Engineering

BCA

BSc

Tools

ServiceNow GRC

Archer

Power BI

Tableau

Excel

Job description

Job ID/Reference Code INFSYS-EXTERNAL-253937

Work Experience 6 - 8 Years

Educational Requirements

MCA,Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc

Service Line

Cyber Security

Responsibilities

• Cyber Risk Governance
• Maintain and execute the Cyber Risk Management Framework and associated governance processes.
• Manage and maintain the cyber risk register, ensuring risks are documented, assessed, and regularly reviewed.
• Support risk governance committees and cybersecurity steering forums.
• Ensure cyber risks are aligned with Enterprise Risk Management (ERM) standards and methodologies.
• Risk Assessment & Monitoring
• Conduct cyber risk assessments for applications, infrastructure, cloud platforms, projects, and third-party services.
• Evaluate emerging threats, vulnerabilities, and risk exposures impacting business operations.Track risk treatment plans and ensure timely remediation of identified risks.
• Control Assurance & Compliance
• Manage security risk exceptions and compensating control assessments.
• Ensure alignment with cybersecurity frameworks, standards, and regulations (e.g., ISO 27001, NIST CSF, CIS Controls, GDPR, DORA, NIS2).
• Reporting & Stakeholder Management
• Prepare regular cyber risk reports and dashboards for management and leadership teams.
• Present cyber risk exposure, remediation progress, and risk trends to stakeholders.
• Collaborate with Security Operations, Infrastructure, Application, Data, and Business teams to drive risk reduction initiatives.
• Act as a trusted advisor on cyber risk-related matters for business and technology stakeholders.

Technical and Professional Requirements

• Functional & Technical Skills[RN2.1][SK2.2]
• Cyber Risk Management and Risk Assessment methodologies.
• Strong understanding of Information Security and Cybersecurity principles.
• Knowledge of Governance, Risk, and Compliance (GRC) processes.
• Experience with cybersecurity frameworks and standards (ISO 27001, NIST, CIS Controls).
• Basic understanding of cloud security, infrastructure security, application security, and data protection concepts.
• Experience in preparing and advising business on different mitigation strategies that would best fit the situation
• Experience managing risk registers, KRIs, KPIs, and remediation tracking.
• Strong reporting, dashboarding, and analytical skills.
• Behavioral Competencies
• Strong stakeholder management and influencing skills.
• Flexibility and ability to adjust approach, frameworks and controls to specific business cases and risks
• Excellent communication and presentation capabilities.
• Analytical and problem-solving mindset.
• Ability to prioritize and manage multiple risks and initiatives.
• Collaboration and teamwork across global and multicultural environments.
• High attention to detail and governance discipline.
• Good to Have
• Functional & Technical Skills
• Experience with NIS2, GDPR, and other regulatory frameworks.
• Knowledge of Third-Party Risk Management (TPRM).
• Experience with cybersecurity risk management tools and GRC platforms (e.g., ServiceNow GRC, Archer).
• Understanding of Security Operations, Vulnerability Management, and Incident Response processes.
• Data analytics and reporting automation capabilities (Power BI, Tableau, Excel advanced analytics).

Preferred Skills

Technology->Risk Management->Risk Management System Technology->Cloud Security->AWS - GRC Technology->Cloud Security->GCP - GRC