Manager - GRC

Job Description

Manager / Senior Manager - Governance, Risk & Compliance (GRC)

Location

Bangalore

Experience

8-10 years of experience in Governance, Risk, Compliance, and Information Security.

Role Overview

The GRC Manager / Senior Manager is responsible for leading cybersecurity governance, risk management, compliance, and awareness programs in ZEE. This role ensures enterprise-wide risk visibility, audit readiness, regulatory compliance, and continuous improvement of the cybersecurity maturity posture.

Key Responsibilities Risk Management & Governance

Maintain an up-to-date enterprise risk register including risk assessment, mitigation, and acceptance inputs with status.

Conduct weekly reviews of enterprise and engineering risks and policy exceptions and track closure.

Perform proactive risk identification through process reviews, audits and control testing.

Publish fortnightly cybersecurity and privacy risk summary reports to leadership.

Track KPIs and publish dashboards indicating control maturity.

Security Awareness & Training

Plan and execute weekly cybersecurity awareness campaigns via email.

Conduct monthly cybersecurity and privacy training for contractors.

Lead quarterly ethical phishing simulations, reduce phishing failure rates and improve reporting rate.

Execute industry-event-based awareness programs and annual gamified security carnival.

Policies, ISMS & Process Reviews

Lead annual Information Security Policy and Procedure reviews with cross-functional stakeholders.

Plan and execute ISMS risk assessments, internal and external ISO 27001 audits.

Review cybersecurity processes and recommend enhancement to process and control measures for improvement.

Leadership Reporting & Governance Committees

Prepare quarterly cybersecurity and monthly business review reports for CIO and leadership.

Convene and manage Information Security & Privacy Steering Committee (ISPSC) meetings and track actions/decision out of the meetings for closure.

Audit, Compliance & Contracts

Assist the team during internal, corporate, and statutory audits.

Review MSAs, NDAs, and project engagements for security obligations.

Support in security and privacy compliance portal submissions.

Financial & Corporate Governance

Track cybersecurity budget consumption and renewals.

Provide cybersecurity inputs for ESG, BRSR and Annual reporting.

Qualifications & Certifications

- Bachelor s degree in Engineering, Computer Science, or related field.

- Preferred certifications: CISM, CISSP, CRISC, ISO 27001 Lead Auditor/Implementer.

• GRC & Risk Management
• ISO 27001 / ISMS
• Audit & Compliance
• Security Governance
• Risk Reporting & Dashboards