Key Responsibilities:

- Manage Cyber Security policies, procedures, standards, and governance framework

- Drive Risk, Incident, Change, Problem, and Cyber Crisis Management processes

- Ensure compliance with IRDAI regulations, ISO 27001:2022, and DPDP Act requirements

- Conduct cyber security drills, tabletop exercises, and awareness campaigns

- Track security exceptions, vulnerability assessments, application security findings, and remediation activities

- Lead audit readiness and closure for Internal, ISO, and Regulatory audits

- Prepare MIS, KRIs/KPIs, risk dashboards, and Board/CISO presentations

- Manage third-party risk assessments, vendor due diligence, and review security clauses in contracts

Desired Profile:

- BE/B.Tech with 4-6 years of experience in Cyber Security, GRC, Risk Management, or Compliance

- Robust understanding of ISO 27001:2022, DPDP Act, IRDAI Cyber Security Guidelines, Third-Party Risk Management, and Security Governance

- Preferred Certifications: ISO 27001 Lead Auditor/Implementer, CEH

- Strong stakeholder management, audit, compliance, and reporting skills

📌 Cyber Security GRC Professional (Mumbai)
🏢 Mahindra Insurance Brokers (MIBL)
📍 Mumbai