Contractor - GRC

We are looking forward to hire GRC Professionals in the following areas :

Senior Manager - Cybersecurity Governance, Risk & Compliance (GRC)

Location: Hyderabad, India
Shift: Night Shift (US Business Hours)

About the Role

We are seeking an experienced Cybersecurity Governance, Risk & Compliance (GRC) leader to drive enterprise-wide security governance, risk management, compliance, and cyber operations oversight. This role will act as a strategic partner to business, technology, audit, and compliance teams, operating in a capacity closely aligned with a CISO function while providing leadership across cybersecurity programs, process controls, regulatory compliance, third-party risk management, and security awareness initiatives.

The ideal candidate will have strong experience in regulated environments, including SOX, Data Privacy, FDA-regulated controls, cybersecurity governance, and risk management frameworks.

Key Responsibilities

Governance, Risk & Compliance

• Lead and mature the organizations cybersecurity governance and compliance programs.
• Establish, monitor, and improve security policies, standards, procedures, and control frameworks.
• Drive compliance with SOX, data privacy regulations, FDA requirements, and internal corporate policies.
• Partner with internal and external auditors to support audits, assessments, and remediation activities.
• Conduct control reviews and risk assessments across business processes and technology environments.
• Develop executive-level risk reporting, dashboards, and governance metrics.

Process & System Controls

• Oversee implementation and effectiveness of IT and business process controls.
• Ensure adequate control coverage across critical applications, infrastructure, and business processes.
• Monitor control deficiencies and drive corrective and preventive actions.
• Collaborate with business stakeholders to strengthen operational resilience and regulatory compliance.

Cybersecurity Operations & Risk Management

• Provide oversight and governance for cybersecurity operations.
• Review security incidents, vulnerabilities, threat trends, and remediation programs.
• Drive vulnerability management governance and track risk reduction initiatives.
• Support the development and execution of cybersecurity roadmaps and strategic initiatives.
• Ensure alignment with industry frameworks such as NIST, ISO 27001, CIS Controls, and related standards.

Third-Party & Supplier Risk Management

• Lead cybersecurity assessments of vendors, suppliers, and strategic partners.
• Establish and maintain third-party risk management processes.
• Evaluate security controls, contractual requirements, and risk mitigation plans for external partners.
• Monitor ongoing risk exposure associated with third-party relationships.

Cybersecurity Awareness & Culture

• Develop and manage enterprise security awareness and training programs.
• Drive a strong culture of cybersecurity and risk management across the organization.
• Partner with HR, Legal, Compliance, and Leadership teams to enhance employee awareness and engagement.

Stakeholder & Leadership Engagement

• Act as a trusted advisor to senior management on cybersecurity and compliance matters.
• Present risk and compliance updates to leadership and governance committees.
• Collaborate with global teams across multiple geographies and time zones.
• Influence strategic decision-making through risk-based recommendations.

Required Qualifications

• Bachelors degree in Information Security, Computer Science, Engineering, or related field.
• 12+ years of experience in Cybersecurity, Risk Management, Compliance, Audit, or Information Security Governance.
• Strong experience with:
• SOX Compliance
• Data Privacy Regulations

Our Hyperlearning workplace is grounded upon four principles

• Flexible work arrangements, Free spirit, and emotional positivity
• Agile self-determination, trust, transparency, and open collaboration
• All Support needed for the realization of business goals,
• Stable employment with a great atmosphere and ethical corporate culture