Head - Information Security/GRC & Data Privacy

Job Opening: Head - Information Security, GRC & Data Privacy

Location: Delhi / Bhopal

Job Type: Full-Time, Onsite

Experience: 5 - 10 Years

Industry: Group of Companies / University

Job Summary:

We are seeking an experienced professional to lead Information Security, Governance, Risk & Compliance (GRC), and Data Privacy across group companies and the university. The role will focus on cybersecurity governance, DPDPA compliance, IT risk management, audits, and implementation of security and privacy frameworks.

Key Responsibilities:

- Develop and implement information security policies, governance frameworks, and cyber risk management practices.

- Lead compliance with the Digital Personal Data Protection Act (DPDPA) and applicable privacy regulations.

- Manage IT GRC programs and compliance with ISO 27001, SOC 2, NIST, and other relevant frameworks.

- Oversee internal and external IT audits, risk assessments, vulnerability management, and remediation.

- Conduct third-party/vendor security assessments and monitor cloud and SaaS security.

- Establish data privacy controls, risk registers, and security awareness programs.

- Coordinate with IT teams across group companies and the university to strengthen security and compliance.

Eligibility Criteria:

- 5 - 10 years of relevant experience in Information Security, Cybersecurity, IT Risk, GRC, or Data Privacy.

- Experience in DPDPA/GDPR compliance, ISO 27001, security audits, and risk management.

- Exposure to cloud security, SaaS platforms, and third-party risk management.

- Certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent will be preferred.

Application: Interested candidates can apply with their updated CV.