ASSOCIATE DIRECTOR - GRC/DRAC

Practice Head ? Governance, Risk & Compliance (GRC)

15+ Years

Bengaluru / Noida / Chennai / Hyderabad (Flexible)

We are seeking an experienced GRC Practice Head to lead and scale our Governance, Risk & Compliance practice. The individual will be responsible for driving business growth, solution development, consulting delivery, client engagement, capability building, and managing a high-performing GRC team. The ideal candidate should have strong expertise in cybersecurity governance, risk management, compliance frameworks, security consulting, and business leadership within a services organization.

• Define and execute the vision, strategy, and roadmap for the GRC practice.
• Build and manage a portfolio of GRC services covering Governance, Risk Management, Compliance, Privacy, and Security Assurance.
• Establish delivery standards, methodologies, frameworks, and best practices.
• Drive practice profitability, utilization, and revenue growth.

• Partner with sales teams to identify, qualify, and pursue opportunities.
• Lead client presentations, workshops, solution discussions, and executive briefings.
• Develop proposals, SoWs, effort estimations, and commercial models.
• Own revenue targets and contribute to business expansion across industries.

• Oversee end-to-end delivery of GRC engagements.
• Provide advisory services on enterprise risk management and regulatory compliance.
• Ensure compliance assessments, audits, and remediation programs are delivered successfully.
• Act as an escalation point for critical client engagements.

• Lead assessments and implementation programs around:
  • ISO 27001
  • SOC 1 / SOC 2
  • NIST CSF
  • PCI-DSS
  • GDPR
  • HIPAA
  • ISO 22301
  • ISO 27701
  • RBI, SEBI, IRDAI, MAS, UAE and other regional regulations
• Support clients in establishing governance models and compliance programs.

• Define enterprise risk management frameworks and strategies.
• Conduct cyber risk assessments, third-party risk evaluations, and control maturity assessments.
• Drive risk mitigation and remediation initiatives.
• Develop risk dashboards and executive reporting mechanisms.

• Build and mentor a high-performing team of consultants and architects.
• Drive recruitment, capability development, certifications, and career planning.
• Establish Centers of Excellence (CoEs) for GRC and Compliance services.
• Foster innovation and thought leadership.

• Deep expertise in Governance, Risk & Compliance frameworks.
• Strong understanding of cybersecurity, information security, and privacy domains.
• Experience in enterprise risk management and regulatory compliance programs.
• Exposure to cloud security governance across AWS, Azure, and GCP.
• Strong client-facing consulting and stakeholder management skills.
• Proven experience managing large-scale transformation and compliance programs.
• Excellent leadership, negotiation, and business development capabilities.

• CISSP
• CISM
• CRISC
• CISA
• ISO 27001 Lead Implementer / Lead Auditor
• PCI-QSA (Preferred)
• CGEIT
• CDPSE
• PMP or PRINCE2

• IT Services
• BFSI
• Healthcare
• Retail & E-commerce
• Manufacturing
• Telecom
• Public Sector / Government

• Bachelor's degree in Engineering, Computer Science, Information Security, or related field.
• Master's degree (MBA/MS) preferred.

• Practice Revenue & Margin Growth
• New Logo Acquisition
• Delivery Excellence & Customer Satisfaction
• Compliance & Audit Success Rate
• Team Utilization & Capability Development
• Thought Leadership & Market Positioning

• 15+ years of experience in Information Security, Cybersecurity Consulting, Risk Management, and Compliance.
• 5+ years leading a GRC practice, business unit, or consulting team.
• Proven track record of building and scaling cybersecurity consulting services.
• Experience managing CXO-level stakeholder relationships and large enterprise accounts.
• Strong balance of business leadership, consulting expertise, and delivery governance.