Manager, Information Security Management

About the role

We are seeking a strategic and experienced Information Security GRC (Governance, Risk & Compliance) Manager to lead and mature our enterprise-wide GRC program across information security, data privacy, and telecommunications regulatory compliance.

What you'll do

• Own and drive the organization's GRC strategy, roadmap, and operating model across information security, data privacy, and telecommunications compliance
• Build, lead, and mentor a team of GRC specialists, setting clear objectives, performance expectations, and development plans
• Report program health, risk posture, and compliance status to the CISO and senior leadership on a regular cadence
• Define and track GRC program KPIs and OKRs (Key Performance Indicators / Objectives and Key Results), ensuring measurable outcomes and continuous improvement
• Policy & Standards Governance

What you need

• 7–10 yrs of experience
• ISO 27001
• CISM
• CISSP
• CISA
• Risk management
• Compliance
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• Network security
• Data privacy
• Telecom
• Incident response