T&T | Cyber:CST | Manager | ISO:27001 | Mumbai

About the role

Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Subject matter specialist in GRC and multiple security domains Extensive experience in leveraging industry standards and frameworks such as ISO/IEC 17799, ISO/IEC 27001, COBIT, ITIL, etc.

What you'll do

• Establishing and maintaining risk governance frameworks, facilitating risk identification, evaluation, mitigation, and continuous monitoring
• Designing and validating secure IT and OT architectures, ensuring integration of application security principles throughout the software development lifecycle
• Overseeing third-party risk assessments and managing compliance with regulatory frameworks such as RBI, SEBI, IRDA, PCI DSS, and others
• Assessing the organization’s cybersecurity maturity (using frameworks like NIST CSF) and developing strategic roadmaps to strengthen security posture over time

What you need

• 8–15 yrs of experience
• ISO 27001
• Compliance
• Risk management
• ITIL
• SEBI regulations
• AWS
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• CISA
• CISSP
• CISM
• GCP
• Azure