We are looking for an experienced Information Security Governance, Risk & Compliance (GRC) qualified to drive Information Security, Business Continuity, Risk Management, Cybersecurity Compliance, and AI Governance initiatives. The candidate will be responsible for conducting risk assessments, managing audits, ensuring compliance with security frameworks, driving BCM activities, and supporting cybersecurity governance across the organization.

Your Role
Conduct Information Security Risk Assessments and Risk Treatment planning.
Manage and maintain ISMS aligned to ISO 27001 requirements.
Conduct Internal Audits, Control Assessments and Compliance Reviews.
Perform ITGC reviews covering Access Management, Change Management, Incident Management and Backup/Recovery controls.
Drive Business Continuity Management activities including BIA, BCP and DR testing.
Coordinate and support Security Incident Management and RCA activities.




Perform Third-Party/Vendor Risk Assessments and Due Diligence reviews.
Manage Information Security awareness and training programs.
Ensure compliance with ISO 27001, ISO 22301, GDPR, DPDP and other cybersecurity requirements.
Develop policies, procedures, standards and governance documentation.
Conduct cybersecurity contractual and regulatory compliance reviews.
Support audits, client assessments and management reporting.
Assess and govern risks associated with AI/GenAI technologies.

Your Profile:
5 - 8 years of overall experience in Information Security, Risk Management, Governance, Risk & Compliance (GRC), Audit, or Cybersecurity Governance.
Minimum 3+ years of hands-on experience in Information Security Risk & Compliance activities.

📌 Information Security Chennai
🏢 Capgemini
📍 Chennai