IN- Senior Manager– ITGC – Strategy, Governance, Risk & Compliance –Advisory – Mumbai-HRN

Job Description & Summary

A career within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. We play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats.

The Senior Manager provides strategic leadership across complex ITGC and cybersecurity governance, risk and compliance portfolios. The role is accountable for client relationships, engagement quality, commercial performance, solution development, senior team leadership and translating enterprise technology risks into sustainable transformation and remediation programmes.

Job Position Title:

IN-Senior Manager - ITGC - Strategy, Governance, Risk & Compliance - Advisory - Mumbai

Responsibilities:

- Lead the strategy, scoping and delivery of large, complex ITGC, ISO 27001, NIST CSF, cybersecurity risk and regulatory compliance engagements.

- Oversee a portfolio of engagements and parallel workstreams, including resourcing, governance, milestones, budgets, profitability, dependencies and executive quality reviews.

- Provide final review and challenge over control design, operating-effectiveness conclusions, risk ratings, supporting evidence, workpapers and executive reports.

- Advise CXO and senior leadership stakeholders on technology risks, control gaps, root causes, remediation roadmaps, risk acceptance and residual risk.

- Direct enterprise-wide assessments covering identity and access management, change management, IT operations, cloud and infrastructure controls, network and endpoint security, threat intelligence and incident management.

- Establish remediation governance across complex programmes, including executive ownership, prioritization, target dates, escalation mechanisms and closure validation.

- Ensure all deliverables are commercially relevant, technically defensible, aligned to applicable frameworks and tailored to the client's risk profile and operating environment.

- Lead, coach and develop managers and multidisciplinary teams; drive capability building, succession planning, performance enablement and effective deployment.

- Own strategic proposals, solution design, pricing, effort estimation, contract inputs, account growth and priority practice-building initiatives.

- Shape market-facing perspectives on emerging cyber risks, regulatory expectations, technology trends and control innovations relevant to client priorities.

Good to have requirements:

- Significant Big Four, recognized consulting or senior industry risk leadership experience.

- Experience leading cross-functional, multi-location and senior client teams across complex transformation or assurance programmes.

- Demonstrated success in business development, account expansion, executive presentations and differentiated solution development.

- Advanced certifications such as CISA, CISM, CISSP, CRISC, CCSP or ISO 27001 Lead Implementer/Auditor.

Mandatory Skill Sets:

- Extensive experience leading large-scale ITGC, IT risk, cybersecurity governance, assurance, compliance or transformation engagements.

- Expert knowledge of ITGC, ISO 27001, NIST CSF, PCI DSS, COBIT and technology control expectations across cloud, ERP and infrastructure environments.

- Demonstrated ability to manage engagement portfolios, commercial outcomes, executive stakeholders, delivery risks and high-performing multidisciplinary teams.

- Strong executive review capability across control testing, risk articulation, root-cause analysis, findings, remediation roadmaps and board-level reporting.

- Excellent executive communication, board-level presentation, negotiation, conflict management and complex issue-resolution skills.

Preferred Skill Sets:

- Experience in cybersecurity transformation, cloud controls, data privacy, third-party risk, operational resilience or regulatory remediation programmes.

- Proven experience managing engagement economics, pricing, contracting, pipeline development and client account growth.

- Relevant advanced professional certification, preferably CISA, CISM, CISSP, CRISC, CCSP or ISO 27001 Lead Implementer/Auditor.

Years of Experience required:

10+ Years

Educational Qualification:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

Advanced degrees and relevant professional certifications are highly desirable.