Senior Manager - GRC

The candidate will have responsibilities across the following functions:

Risk Management and Governance:

• Maintain an up-to-date enterprise risk register, including risk assessment, mitigation, and acceptance inputs with status.
• Conduct weekly reviews of enterprise and engineering risks and policy exceptions and track closure.
• Perform proactive risk identification through process reviews, audits and control testing.
• Publish fortnightly cybersecurity and privacy risk summary reports to leadership.
• Track KPIs and publish dashboards indicating control maturity.

Security Awareness and Training:

• Plan and execute weekly cybersecurity awareness campaigns via email.
• Conduct monthly cybersecurity and privacy training for contractors.
• Lead quarterly ethical phishing simulations, reduce phishing failure rates and improve reporting rates.
• Execute industry-event-based awareness programs and annual gamified security carnival.

Policies, ISMS and Process Reviews:

• Lead annual Information Security Policy and Procedure reviews with cross-functional stakeholders.
• Plan and execute ISMS risk assessments, internal and external ISO 27001 audits.
• Review cybersecurity processes and recommend enhancements to process and control measures for improvement.

Leadership Reporting and Governance Committees:

• Prepare quarterly cybersecurity and monthly business review reports for CIO and leadership.
• Convene and manage Information Security and Privacy Steering Committee (ISPSC) meetings and track actions/decision out of the meetings for closure.

Audit, Compliance and Contracts:

• Assist the team during internal, corporate, and statutory audits.
• Review MSAs, NDAs, and project engagements for security obligations.
• Support in security and privacy compliance portal submissions.

Financial and Corporate Governance:

• Track cybersecurity budget consumption and renewals.
• Provide cybersecurity inputs for ESG, BRSR and Annual reporting.

Requirements:

• Bachelor's degree in Engineering, Computer Science, or related field.
• Preferred certifications: CISM, CISSP, CRISC, I.