Lead - Cybersecurity Risk & Compliance

The Cybersecurity Risk & Compliance function is responsible for evaluating security and compliance risks within the organization. They set up security benchmarks, verify adherence to these standards across all internal sectors, and promote a culture of information security throughout the company.

As a Lead in our Cybersecurity Risk and Compliance team, youll play a pivotal role in fortifying our security measures, leveraging your expertise in various technologies and frameworks. This position demands a proactive approach to risk management, security, automation, and strategic collaboration with diverse stakeholders to elevate our security standards.

Role Expectation

• Drive the day-to-day activities about policy governance, control governance, risk, and compliance initiatives.

• Enumerate cyber security and compliance risks and ensure they are managed appropriately across the products and business functions; Ensure the Product/ Functional team takes prudent risk ownership through active partnership and collaboration.

• Design and oversee the enforcement of policies and procedures based on industry-standard best practices.

• Provide contextual guidance to various internal teams in terms of processes and controls to improve the information security and compliance posture.

• Certify the readiness of the identified security frameworks and certifications by identifying & operationalizing the control requirements.

• Responsible for reviewing and reporting the operating effectiveness of the controls and risk/loss exposure.

• Drive continuous monitoring initiatives for the developed controls and develop reporting metrics, dashboards, and evidence artifacts periodically to be presented to the Leadership.

• Drive security awareness program throughout the year to effectively motivate desired behaviors & conduct regular training on security policy and standard requirements through training, communication, and workshops.

• Be a role model for the team and provide a healthy platform for the team to learn and grow.

• Stay abreast of the developing regulatory concerns and changing information security trends
  Qualifications

• 8-10 years of experience in the Risk & Compliance space, viz. Risk enumeration, defining security standards, and managing information security processes.

• Work experience or conceptual understandin