Information Security Lead

Job Title: Information Security - GRC Lead

Department: InfoSec & Tech Ops

Location: Pune (On-site)

Job Type: Full-time

Experience Level: 5 to 10 years

Job Summary: We are seeking a highly motivated and hands-on GRC lead to drive our governance, risk, and compliance (GRC) initiatives. This role is crucial for designing, implementing, and overseeing robust security programs, conducting in-depth technical risk assessments, and ensuring continuous adherence to cybersecurity frameworks. This role will lead efforts in enhancing our security posture through application and strategic guidance across our internal infrastructure.

Key Responsibilities

• Lead the design, implementation, and continuous improvement of the ISMS and cybersecurity programs (NIST CSF, ISO 27001, SOC2, Privacy).
• Oversee security assessments and compliance for third-party vendors and supply chain components.
• Develop, enforce, and continuously refine technical security policies, standards, and operational procedures.
• Conduct internal audits for both technology & wider business teams.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related technical field.
• 5-10 years of progressive hands-on experience in GRC. Audit & regulatory experience will be a bonus..
• Practical understanding and application of cybersecurity frameworks (NIST CSF, ISO 27001 etc.).
• Strong analytical, problem-solving, and critical thinking skills, with proven ability to make sound decisions under pressure.

Preferred Certifications:

• ISO 27001
• CISA or CRISC