Job Description:

We are seeking a seasoned Information Security skilled who has expertise in GRC with over 8+ years of progressive experience across data security, access management, IT security, network security, IT risk management, and compliance with standards such as ISO 27001, HIPAA, GDPR, NIST. This individual will lead GRC efforts, ensuring the confidentiality, integrity, and availability of the organization’s IT infrastructure, while aligning security governance with business needs.

Key Responsibilities:
Leadership & Governance:
Lead and manage security across cloud applications, networks, cloud infrastructure, and end-user settings.
Develop and implement enterprise-wide security governance, IT risk management, and compliance strategies.
Ensure alignment with industry frameworks (e.g., NIST, ISO, GDPR, ITGC) and regulatory requirements (e.g., IT Act, CERT guidelines).
Security Operations & Incident Management:
Oversee IT security operations, ensuring the effectiveness of security controls, incident response, and vulnerability management.




Conduct vulnerability assessments reviews and lead system security hardening and remediation efforts, patch management.
Perform IT security risk assessments and lead security audits in compliance with ISO 27001, HIPAA, and other relevant standards.
Ensure all information security and privacy incidents are recorded, reported to top management, and communicated to relevant CFT members.
Risk & Compliance Management:
Lead risk assessments and gap analysis, providing recommendations for improvements to contracts, policies, and processes.
Manage compliance dashboards and reports, ensuring that data confidentiality and customer information protection are maintained.
Ensure adherence to internal security policies and external regulatory requirements through regular audits and reviews.
Security Tools & Technology Management:
Design and manage Security Information and Event Management (SIEM) to

📌 Manager It Governance Risk Bengaluru
🏢 Mancraft Consulting
📍 Bengaluru