Lead Governance, Risk & Compliance

Job Title: Lead Governance, Risk & Compliance (GRC)

Location: Gurugram

Job Type: Full-Time

Role Overview:

This role works independently, owning the GRC vertical end-to-end, while leading MSS teams for delivery and collaborating with other Leads as part of a unified security leadership team.

Key Responsibilities:

Strategic Impact

• Define and execute the organization wide Network GRC framework, roadmap, and governance model for telecom network security.
• Align GRC initiatives with business priorities, regulatory requirements, and international standards.
• Champion a culture of risk-aware decision-making and regulatory readiness across the enterprise.
• Lead network security maturity assessments and define security roadmap with help of other domains

Operational Excellence

• Provide executive-level reporting on audit findings, risk exceptions, and closure status to leadership.
• Lead regulatory, internal, and external audits (e.g., Central & LSA Security MBSS audits) and ensure compliance.
• Ensure compliance with Internal Security policies, DOT license conditions, NCIIPC guidelines, DPDP Act, TRAI, OFFCOM, and international standards (ISO 27001/27017, SOC 1/2, NIST).
• Oversee risk identification, analysis, assessment, exception management, and mitigation planning.
• Drive risk management lifecycle – including identification, analysis, exception handling, tracking, and closure of risks across all business domains.
• Implement compliance automation, dashboards, and maturity benchmarking to track audit and risk closure progress.
• Govern and track security SLA KPIs with managed service partners, OEMs, and business functions.

Leadership & Collaboration

• Provide executive-level reporting on audit outcomes, compliance posture, and enterprise risk profile.
• Partner with domain owners, strategy, design, planning, and operations teams to embed GRC into all layers of the network.
• Build strong governance relationships with OEMs, MSSPs, and regulators.
• Lead the Managed Security Services GRC team to ensure timely GRC deliverables

Required Skills and Experience:

• 15+ years of experience in Cyber Security, with at least 10+ years in telecom or large-scale enterprise GRC leadership.
• Strong expertise in audit management, regulatory compliance, and risk governance.
• Experience with Unified Compliance Framework (UCF) and risk management methodologies.
• In-depth knowledge of telecom network environments (2G, 4G, 5G SA/NSA, FWA for Consumer & Enterprise Services, Wi-Fi, Homes & Broadband, NLD/ILD, DTH, Enterprise and Transport)
• Proven ability to influence senior stakeholders and manage cross-functional governance with OEMs and MSSPs.

Preferred Qualifications:

• Certifications: CISA, CISM, CISSP, ISO 27001 LA/LI, GSMA NESAS/SCAS familiarity.
• Experience in consulting or managed security services governance.
• Knowledge of 3GPP, GSMA FS.11, ISO 27011, and telecom-specific regulatory frameworks.
• Exposure to enterprise GRC platforms and compliance automation tools.

Why Join Us?

• Lead the strategic GRC function for one of the leading telecommunications companies globally.
• Shape the future of regulatory compliance, risk management, and governance in telecom.
• Collaborate with global OEMs, regulators, and MSS partners on high-impact initiatives.
• Influence security culture and governance transformation across diverse telecom technologies and services.