Senior Manager – Governance Risk & Compliance (GRC)

About the role

We are seeking a Senior Manager to lead Governance, Risk & Compliance (GRC) initiatives with a strong focus on cybersecurity. The role will oversee end‑to‑end project delivery, ensuring security outcomes align with business objectives.

Key responsibilities

• Lead and execute cybersecurity projects from initiation to closure, defining scope, timelines, milestones and resource allocation while prioritising security best practices.
• Identify, assess and mitigate security risks throughout the project lifecycle and develop mitigation strategies aligned with the organisation’s risk appetite.
• Collaborate with internal and external stakeholders, communicating security requirements, expectations and project deliverables.
• Implement and monitor security controls to ensure compliance with policies, regulations such as DPDP and PCI‑DSS, and industry standards; conduct security assessments.
• Maintain comprehensive security documentation, including risk assessments, vulnerability reports and architecture diagrams, and present security‑focused reports to senior management.
• Provide expert guidance and mentorship on security architecture, risk management and incident response to project teams.
• Manage security‑related escalations and incidents within projects, ensuring timely and effective response.
• Continuously improve processes by introducing security best practices and enhancements to the organisation’s security posture.

Required profile

• 12‑16 years of overall experience with a proven track record of leading complex cybersecurity projects, preferably in the cybersecurity or e‑commerce sector.
• Bachelor’s degree in Computer Science, Information Security or a related field; advanced degree or certifications such as CISSP, CISM, CEH, OSCP are highly desirable. PMP or other project‑management certifications are a plus.
• Deep understanding of cybersecurity principles, practices and technologies across network, application, data and cloud environments.

Required skills

• Network security
• Application security
• Data security
• Cloud security
• Security architecture
• Risk management
• Vulnerability management
• Incident response
• Regulatory compliance (DPDP, PCI‑DSS)