Infosec Risk and Governance

What you’ll do:

• Develop and maintain InfoSec strategy, policies, standards, and controls aligned with ISO, NIST, GDPR, PCI‑DSS, etc.
• Lead risk management: identify threats to assets, vendors, apps; run risk assessments; manage remediation.
• Oversee third-party/vendor security due diligence and contracts.
• Drive Vulnerability Management, patching, BCDR planning and incident response.
• Coordinate AppSec program: threat modeling, secure coding, testing.
• Ensure compliance and support internal/external audits; monitor and report on security posture.
• Build security awareness via training; foster a strong security culture.
• Report regularly to senior leadership and recommend improvements based on metrics and audit insights.

Must‑have:

• 5+ years in InfoSec, GRC, or risk roles
• Strong knowledge of frameworks (ISO 27001/27002, NIST CSF, COBIT) & regulations (GDPR, PCI‑DSS, SOX)
• Experience with vendor risk, BCDR, VM, and AppSec
• Certified (CGRC,CISM, CISSP, CISA, CRISC)

Job Types: Full-time, Permanent

Pay: Up to ₹83,000.00 per month

Benefits:

• Provident Fund

Schedule:

• Day shift

Application Question(s):

• Are you Proficient with any GRC Portal?

License/Certification:

• ISO 27001 2022 Implementer / Auditor Mandatory (Required)

Work Location: In person