Manager- GRC

CyberCube Services; Gurugram District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

CyberCube Services provides cybersecurity solutions and advisory services across industries, helping clients meet regulatory obligations and strengthen governance frameworks.

The Role: lead gap assessments, audits, and compliance journeys for ISO 27001, PCI DSS, SOC 1/2, and related standards; guide risk assessments and control maturity; develop and review information security policies and incident management documentation; engage with CISOs, CIOs, and senior management to drive client

Qualifications

• Min 5yr of experience in governance, risk and compliance.
• Strong knowledge of ISO 27001, NIST, PCI DSS, GDPR, HIPAA as applicable.
• Experience conducting risk assessments, control testing, internal audits, and compliance reviews in cybersecurity environments.
• Ability to develop and implement information security policies, standards and procedures.
• Proficiency in translating regulations into practical, business-oriented controls.

Responsibilities

• Lead gap assessments, readiness reviews, internal audits and compliance assessments for PCI DSS, PCI PIN, PCI SSF, ISO 27001, ISO 22301 and SOC 1/2.
• Oversee identification of control gaps, risks, non-conformities and provide remediation recommendations.
• Support clients through end-to-end compliance journeys, including documentation, evidence management and audit preparation.
• Ensure quality and timely delivery of audit and assessment reports and management presentations.
• Lead client meetings, steering committees and executive reviews; translate security requirements into business risks.

Skills

Governance & risk management

Regulatory compliance

Audit leadership

Client engagement

Education

CISA, CISM, CISSP, PCI QSA, QPA certifications

Tools

ISO 27001

NIST

PCI DSS

GDPR

Job description

Company Description CyberCube Services provides comprehensive cybersecurity solutions and advisory services to organizations across multiple industries. The company focuses on helping clients understand and meet cybersecurity compliance obligations and regulatory requirements. CyberCube’s consulting support spans diverse domains, enabling businesses to strengthen their security posture and governance frameworks. Team members work on impactful projects that directly influence clients’ cyber risk management strategies and regulatory readiness.

Role Description

Security Audits & Compliance

• Lead gap assessments, readiness reviews, internal audits, and compliance assessments for PCI DSS, PCI PIN, PCI SSF, ISO 27001, ISO 22301, and SOC 1/2.
• Oversee identification of control gaps, risks, non-conformities, and provide practical remediation recommendations.
• Support clients through end-to-end compliance and certification journeys, including documentation, evidence management, remediation, and audit preparation.
• Ensure quality and timely delivery of audit reports, assessment reports, and management presentations.

Risk, Governance & Resilience

• Lead information security risk assessments, BIA, risk treatment, and control maturity assessments.
• Establish and improve ISMS and BCMS aligned with ISO 27001 and ISO 22301.
• Advise clients on security governance, internal controls, KRIs/KPIs, risk registers, and compliance frameworks.
• Guide organizations in strengthening business continuity, disaster recovery, and organizational resilience.

Policy & Compliance Frameworks

• Oversee development and review of information security policies, procedures, SOPs, SoA, risk registers, incident management documentation, BCP/DR plans, and audit documentation.
• Ensure controls and processes are aligned with applicable regulatory and industry requirements.

Client & Executive Engagement

• Act as a trusted advisor to CISOs, CIOs, senior management, IT, compliance, and operations stakeholders.
• Lead client meetings, steering committees, governance reviews, and executive presentations.
• Translate complex security and regulatory requirements into clear business risks and actionable recommendations.
• Drive client satisfaction, engagement quality, and long-term relationships.
• Lead and mentor teams of cybersecurity, GRC, audit, risk, and compliance professionals.
• Manage multiple projects, resources, timelines, budgets, risks, and delivery priorities.
• Establish quality standards and review mechanisms for consulting deliverables.
• Support business development, proposals, RFPs, solution design, and growth of cybersecurity/GRC consulting services.
• Contribute to development of new service offerings and industry-focused solutions.
  

Preferred Certifications

CISA, CISM, CISSP, PCI QSA, QPA or equivalent professional certifications.

Qualifications

• Min 5yr of working experience in the relevent domain.
• Strong knowledge of governance, risk management, and compliance frameworks (e.g., ISO 27001, NIST, PCI DSS, GDPR, HIPAA as applicable).
• Experience conducting risk assessments, control testing, internal audits, and compliance reviews in cybersecurity or information security environments.
• Ability to develop and implement policies, standards, procedures, and guidelines related to information security and regulatory compliance.
• Proficiency in interpreting cybersecurity regulations and translating requirements into practical, business-oriented controls and processes.
• Experience leading client-facing projects or consulting engagements, including stakeholder management and expectation setting.
• Strong analytical and problem-solving skills, with the ability to prioritize, manage multiple assignments, and meet deadlines.
• Excellent written and verbal communication skills, including the ability to prepare clear reports, presentations, and recommendations for technical and non-technical audiences.
• Demonstrated leadership skills, including mentoring, team coordination, and fostering an inclusive, collaborative work environment.