Position Title : Risk Manager, Cyber Security, ACG Group

Organization Context:

Position Title:Risk Manager, Cyber Security, ACG Group

Employee Name:To Be Hire

Grade :M-05

Department:Corporate Information Technology

Location:Jogeshwari, Mumbai

Reports to:Head, Cyber Security, ACG Group

ACG is the worlds only integrated pharma manufacturing solutions company. We are headquartered in Mumbai , India. ACG has a presence in over 100 countries with its products and services that strive to provide world-class technology across multiple domains. We offer a complete range of solutions beginning with empty capsules; granulation and tablet coating; capsule filling; tabletting; packaging films; blister packing and carton packing to the end-of-line solutions and track and trace systems.

We have an chance in ACG Corporate of a Risk Manager, Cyber Security, ACG Group.

1. Job Objective

- Strengthen enterprise cyber risk governance
- Drive proactive risk identification & mitigation
- Enhance risk monitoring & reporting
- Improve cyber resilience & compliance
- Strengthen third party / supply chain cyber risk management
- Improve cyber risk awareness
- Advance AI enabled cyber risk intelligence & analytics

1. Primary responsibilities

- Conduct enterprise-wide cyber risk assessments covering IT, cloud, OT, applications, and third-party environments to identify and evaluate security risks.
- Maintain and update the cyber risk register, ensuring risks are documented, prioritized, tracked, and periodically reviewed with relevant stakeholders.
- Monitor implementation of risk mitigation and remediation actions, and coordinate with technology and business teams to ensure timely closure of identified gaps.
- Develop and present cyber risk dashboards, KRIs, compliance reports, and management updates for leadership and governance forums.
- Review cybersecurity policies, standards,



and control frameworks to ensure alignment with regulatory requirements, industry best practices, and organizational objectives.
- Support cyber incident response, business continuity, audit activities, and vendor risk assessments by providing risk analysis, impact evaluation, and recommendations for resilience improvement.

1. Key Result Areas

- Effectiveness of enterprise cyber risk identification, assessment, prioritization, and governance processes
- Timely closure of identified cyber risks, vulnerabilities, audit findings, and control gaps
- Accuracy, timeliness, and quality of cyber risk dashboards, KRIs, executive reports, and risk insights
- Adherence to cybersecurity policies, standards, and internal control frameworks, including audit readiness and compliance tracking.
- Assessment and ongoing monitoring of cybersecurity risks associated with vendors, service providers, and external partners.
- Contribution to incident response preparedness, business continuity planning, crisis coordination, and post-incident risk evaluation activities.
- Adoption of automation, threat intelligence, AI-enabled analysis, and process improvements to enhance cyber risk visibility and operational efficiency.

1. Key Interfaces

Internal InterfacesExternal Interfaces

- ACG IT Team
- ACG Businesses
- Security Vendors
- Security Consultants

1. ACG Persona

Persona LevelCompetencyLevel

Decision Making, Security frameworks, Problem Solving, Risk & Threat Management, Cross functional teamwork, Security tools & technologies, Communications, Compliance management, Deliver consistent results, Vendor Management, Persona Innovator, Persona Partner 4

1. Educational and Experience Requirements

Minimum Requirement Desired Level of Education

- Bachelors + InfoSec certs such as ISO 27001 Lead Auditor or ISO 27001 Lead Implementer
- Masters + InfoSec certs such as CRISC, CISSP, CISA / CISM.

Experience

- 8+ years
- 10-12 years

📌 Manager, Risk Manager, Cyber security, ACG Group (Maharashtra)
🏢 ACG
📍 Maharashtra