Senior Manager/ AVP- GRC

T&m; Mumbai; On-site; INR 4,500,000 - 6,500,000; Full time

Job summary

T&m in Mumbai is seeking a Senior Manager/AVP - GRC with extensive experience in security advisory, privacy implementation, and risk governance. The role requires leading GRC initiatives, audits, and cross-functional collaboration to ensure regulatory compliance in a dynamic environment.

The ideal candidate will have 14+ years (AVP) or 10+ years (General Manager) of relevant experience, with certifications such as CIPM/CIPP/ISACA-CDPSE/CDPO/GDPR-CDPO/ISO 27701 LA/LI, PMP/CISM/CISSP/CISA/ISO

Qualifications

• Min 10 years of experience in Security Advisory, Cyber Security and privacy implementation.
• Experience in governance, risk and compliance (GRC) frameworks and control design.
• Knowledge of SEBI, RBI, MEITY, NCIIPC, CERT-IN and MoF data security/privacy guidelines.

Responsibilities

• Develop and execute the GRC strategy and framework to ensure regulatory compliance.
• Lead risk assessment and mitigation across the organization.
• Establish governance processes and policies promoting compliance culture.
• Oversee information security policies, standards, and procedures.
• Collaborate with executives to report on GRC status and risks.
• Manage cross-functional teams to integrate GRC across functions.
• Lead internal and external audits and resolve findings.
• Develop training programs on GRC and information security.
• Monitor regulatory changes and adjust GRC program accordingly.

Skills

Security engineering

Privacy engineering

Project management

Cyber security

Data security

SOC operations

Incident management

BFSI security

SEBI/RBI guidelines

Communication

Team collaboration

Education

Graduate / Postgraduate / BE / BTech

CIPM/CIPP/ISACA-CDPSE/CDPO/GDPR-CDPO/ISO 27701 LA/LI; PMP/CISM/CISSP/CISA/ISO 27001

Job description

Post Name- Senior Manager/AVP - GRC

Job Type- Permanent

Location- Mumbai

Budget- For Senior Manager-45 LPA (fixed + variable) For AVP- 65 LPA (fixed + variable)

Educational Qualification/ Certifications:

Mandatory- Graduate / Postgraduate / BE / BTech.

Certifications- At least one of the CIPM/CIPP/ISACA-CDPSE/CDPO/GDPR-CDPO/ISO 27701 LA/LI and/or PMP/CISM/CISSP/CISA/ISO 27001 certifications is mandatory.

Work Experience:

Min 10 years (For General Manager) and 14 years (For AVP) of experience preferred in Security Advisory, Cyber Security and privacy implementation and operations

Responsibilities:

• Develop and execute the GRC strategy and framework to ensure compliance with applicable regulatory requirements and industry standards.
• Lead the assessment and management of security risks across the organization, ensuring effective mitigation strategies are in place
• Establish strong governance processes and policies to promote a culture of compliance and risk awareness among employees.
• Oversee the development, implementation, and maintenance of information security policies, standards, and procedures.
• Collaborate with executive management to provide regular updates on GRC matters, including risk assessment outcomes and compliance status.
• Manage cross-functional teams to integrate GRC practices across relevant business functions and projects.
• Lead internal and external audit processes, ensuring timely completion and resolution of any findings.
• Develop and oversee training and awareness programs related to GRC and information security for staff at all levels.
• Stay abreast of emerging regulatory requirements, security threats, and industry trends to proactively adjust the GRC program as necessary.

Skills Required:

• Should have relevant experience in Security & Privacy engineering and tools implementation.
• Project Management experience with leading a technical team.
• Knowledge on cyber security, data security, SOC operations and incident management
• Experience with large BFSI, trading industry in security and privacy domain will be added advantage.
• Good understanding of SEBI, RBI, MEITY, NCIIPC, CERT-IN and MoF guidelines and advisories in data security, cyber security and data privacy.
• Knowledge of information security and privacy principles and practices, understanding of security protocols, principles, standards and defence in depth.
• Ability to communicate effectively through writing, speaking, and presenting to peers and top management.
• Must be a team player capable of contributing to MCX mission through collaboration with fellow teammates and other stakeholders in a dynamic environment.

For more details contact Sonali at [e-mail]/ [phone].