Senior Manager/ AVP- GRC

T&M Services Consulting Pvt Ltd; Mumbai; On-site; INR 4,500,000 - 6,500,000; Full time

Job summary

T&M Services Consulting Pvt Ltd in Mumbai seeks a senior security leader to design and drive GRC strategies across the organization. The role requires deep expertise in cyber security, privacy, and regulatory compliance, plus leadership of cross-functional teams and audit programs.

Applicants should demonstrate extensive experience in security advisory, risk management, and governance, with relevant certifications and the ability to communicate with executive management on risk posture and

Qualifications

• Min 10 years (General Manager) and 14 years (AVP) in security advisory, cyber security, and privacy implementation/operations
• Certifications in CIPM/CIPP/ISACA-CDPSE/CDPO/GDPR-CDPO/ISO 27701 LA/LI and/or PMP/CISM/CISSP/CISA/ISO 27001 are mandatory

Responsibilities

• Develop and execute the GRC strategy and framework to ensure regulatory and industry-standard compliance.
• Lead assessment and management of security risks with effective mitigation strategies.
• Establish governance processes and policies to promote a culture of compliance and risk awareness.
• Oversee development, implementation, and maintenance of information security policies and procedures.
• Collaborate with executives to report on GRC matters, risk outcomes, and compliance status.
• Manage cross-functional teams to integrate GRC across business functions and projects.
• Lead internal and external audit processes and ensure timely closure of findings.
• Develop and oversee training programs related to GRC and information security for staff.
• Stay updated on evolving regulations, threats, and industry trends to adjust the GRC program.

Skills

GRC governance

Regulatory compliance

Security risk management

Executive communication

Team leadership

Education

GRC/privacy certifications

Job description

Budget- For Senior Manager-45 LPA (fixed + variable)

For AVP- 65 LPA (fixed + variable)

Educational Qualification/ Certifications:

Certifications- At least one of the CIPM/CIPP/ISACA-CDPSE/CDPO/GDPR-CDPO/ISO 27701 LA/LI and/or PMP/CISM/CISSP/CISA/ISO 27001 certifications is mandatory.

Work Experience:

Mandatory-Min 10 years (For General Manager) and 14 years (For AVP) of experience preferred in Security Advisory, Cyber Security and privacy implementation and operations

Responsibilities:

• Develop and execute the GRC strategy and framework to ensure compliance with applicable regulatory requirements and industry standards.
• Lead the assessment and management of security risks across the organization, ensuring effective mitigation strategies are in place
• Establish strong governance processes and policies to promote a culture of compliance and risk awareness among employees.
• Oversee the development, implementation, and maintenance of information security policies, standards, and procedures.
• Collaborate with executive management to provide regular updates on GRC matters, including risk assessment outcomes and compliance status.
• Manage cross-functional teams to integrate GRC practices across relevant business functions and projects.
• Lead internal and external audit processes, ensuring timely completion and resolution of any findings.
• Develop and oversee training and awareness programs related to GRC and information security for staff at all levels.
• Stay abreast of emerging regulatory requirements, security threats, and industry trends to proactively adjust the GRC program as necessary.

Skills Required:

• Should have relevant experience in Security & Privacy engineering and tools implementation.
• Project Management experience with leading a technical team.
• Knowledge on cyber security, data security, SOC operations and incident management
• Experience with large BFSI, trading industry in security and privacy domain will be added advantage.
• Good understanding of SEBI, RBI, MEITY, NCIIPC, CERT-IN and MoF guidelines and advisories in data security, cyber security and data privacy.
• Knowledge of information security and privacy principles and practices, understanding of security protocols, principles, standards and defence in depth.
• Ability to communicate effectively through writing, speaking, and presenting to peers and top management.
• Must be a team player capable of contributing to MCX mission through collaboration with fellow teammates and other stakeholders in a dynamic environment.