Manager- Cyber Security (Immediate Joining)

Tech AGRIM; India; Remote; INR 4,000,000 - 7,000,000; Full time

Job summary

Tech AGRIM seeks an experienced Manager for Cybersecurity GRC & Project Delivery to lead ISO/IEC 27001 engagements, manage multiple client projects, and drive governance across information security and risk domains.

You will coordinate VAPT, red teaming, cloud/security assessments, and stakeholder communications with international clients, ensuring timely delivery and quality outcomes.

Qualifications

• 8–12 years of Cybersecurity GRC, IT compliance, or related work experience.
• Hands-on ISO 27001 implementation, ISMS, risk management, and audit readiness.
• Proven experience managing multiple cybersecurity or GRC engagements.
• Knowledge of VAPT, red teaming, cloud security, and security assessment methodologies.
• Familiarity with NIS2, GDPR, IT risk management, and security governance.

Responsibilities

• Lead end-to-end ISO/IEC 27001:2022 implementation and certification engagements.
• Manage multiple cybersecurity and GRC client engagements and deliveries.
• Oversee VAPT, red teaming, cloud/security reviews, and risk-based remediation planning.
• Coordinate with international clients, delivery teams, and partners.
• Drive project governance, documentation, and quality control across engagements.

Skills

ISO 27001

ISMS

GRC Delivery

Risk management

Audit readiness

VAPT

Red Teaming

Cloud security

Stakeholder mgmt

RSA Archer

Tools

RSA Archer

Job description

Manager – Cybersecurity GRC & Project Delivery

Company: Tech AGRIM

Experience: 8–12 Years

Location: Remote

Employment Type: Full-Time

Department: Cybersecurity & Governance, Risk and Compliance (GRC)

About the Role

Tech AGRIM is seeking an experienced and dynamic Cybersecurity GRC professional to lead and manage multiple client engagements across Information Security, Risk Management, Compliance, and Cybersecurity Services.

Key Responsibilities

1. Cybersecurity GRC & Compliance

• Lead end-to-end ISO/IEC 27001:2022 implementation and certification engagements.
• Conduct gap assessments, risk assessments, internal audits, and compliance readiness reviews.
• Develop, implement, and maintain Information Security Management Systems (ISMS), including security policies, procedures, risk registers, and Statement of Applicability (SoA).
• Coordinate with certification bodies and external auditors for Stage 1 and Stage 2 audits.
• Track audit findings, corrective actions, and compliance improvements through closure.
• Provide advisory support on regulatory frameworks, including NIS2, GDPR, and IT risk management.

2. Cybersecurity Project & Service Delivery

• Independently manage multiple cybersecurity and GRC client engagements.
• Oversee and coordinate cybersecurity services, including:
• Vulnerability Assessment and Penetration Testing (VAPT)
• Red Teaming and Security Assessments
• Cloud Security and Configuration Reviews
• Network and Application Security Assessments
• Phishing Simulations and Security Awareness Programs
• Coordinate with technical teams to ensure timely execution, quality deliverables, and remediation tracking.
• Review security assessment findings and facilitate risk-based remediation planning.

3. Project Management & Delivery Governance

• Manage the complete project lifecycle, from initiation and planning to execution and closure.
• Develop project plans, allocate resources, define milestones, and monitor project progress.
• Ensure adherence to agreed scope, timelines, budgets, and delivery standards.
• Identify project risks, manage dependencies, and proactively resolve delivery challenges.
• Conduct regular project reviews and prepare status reports for clients and internal leadership.
• Ensure proper documentation, quality control, and continuous improvement across engagements.

4. Client & Stakeholder Management

• Serve as the primary point of contact for assigned client engagements.
• Manage client expectations, project communication, and stakeholder relationships.
• Lead project meetings, governance reviews, and escalation discussions.
• Work closely with international clients, internal delivery teams, and external partners.
• Ensure client satisfaction through proactive communication and consistent service delivery.

5. GRC Tools & Team Coordination

• Support implementation and enhancement of GRC platforms, preferably RSA Archer.
• Understand business requirements and recommend improvements to risk and compliance processes.
• Coordinate with functional and technical teams for successful project execution.
• Guide team members, monitor deliverables, and ensure effective resource utilization.
• Drive process standardization, operational efficiency, and delivery quality.

Required Skills & Experience

• 8–12 years of relevant experience in Cybersecurity GRC, IT Compliance, Information Security Consulting, or related areas.
• Strong hands-on experience in ISO 27001 implementation, ISMS, risk management, and audit readiness.
• Proven experience independently managing multiple cybersecurity or GRC engagements.
• Good understanding of VAPT, red teaming, cloud security, and security assessment methodologies.
• Knowledge of NIS2, GDPR, IT risk management, and security governance frameworks.
• Strong project management, stakeholder coordination, and problem-solving capabilities.
• Excellent verbal and written communication skills with experience handling international clients.
• Ability to manage cross-functional teams, resolve escalations, and deliver projects with minimal supervision.

Preferred Qualifications

• ISO/IEC 27001 Lead Auditor or Lead Implementer certification.
• PMP, PRINCE2, CISM, CISSP, or equivalent certifications.
• Experience with RSA Archer or similar GRC platforms.
• Prior experience working with European/Nordic clients.
• Background in cybersecurity consulting or managed security services.

Ideal Candidate Profile

We are looking for a proactive, delivery-oriented professional who combines strong GRC consulting knowledge with practical project management and client engagement experience.

The candidate should be comfortable taking complete ownership of client engagements, coordinating cybersecurity delivery teams, managing multiple priorities, and ensuring successful project outcomes independently.