Security Compliance & GRC Lead
BengaluruFull-time3–6 yrs6 L a yearPosted 1 week ago
Mid-level legal role at Cybrilla in Bengaluru. Needs 3+ years. Pays ₹6 LPA.
About the role
We are looking for a Security Compliance & GRC Lead to help build and operationalize our security governance function as we scale our platform and customer base. This role sits at the intersection of security, engineering, operations, audits, and risk management.
What you'll do
- Own and drive security governance, compliance, and audit readiness programs across the organization
- Manage ISO 27001/27017/27018 and other relevant certification programs, renewals, and control reviews
- Support alignment with applicable regulatory and cybersecurity requirements, including SEBI CSCRF and related capital markets security expectations
- Coordinate customer audits, regulatory reviews, security questionnaires, and evidence requests
- Build and operationalize processes around risk assessments, vendor governance, access reviews, BCP/DR governance, and policy lifecycle management
What you need
- Compliance
- SEBI regulations
- ISO 27001
- Documentation
- Cloud security
- Vulnerability assessment
Good to have
- AWS
- Capital markets