What success looks like in this role:

The Senior Director – GRC is a strategic leadership role responsible for
Creating the vision for the GRC program
Transparent understanding of the business and how the GRC function can be a business enabler
Support the CISO

This role ensures alignment with regulatory requirements, industry standards, and business objectives while providing executive oversight across risk, audit, compliance, and assurance functions.

The position partners closely with the internal teams - CISO, BISO’s, Corporate IT and cross-functional teams (Privacy, Legal, HR, Procurement, Corporate Real Estate), and external teams - Vendors and Customers to drive a risk-aware culture, strengthen control frameworks, and enable secure business growth.

Key Responsibilities
GRC Strategy & Governance
Define and execute the enterprise GRC strategy aligned to cybersecurity and business objectives
Establish governance frameworks, policies, standards, and operating models across GIS
Provide executive reporting to CISO, senior leadership,



and Board-level committees on risk posture and compliance status
Drive continuous improvement of GRC maturity leveraging frameworks such as NIST CSF and ISO 27001
Risk Management (Cyber & IT Risk)
Own the Cybersecurity area within the Enterprise Risk Management (ERM) program including risk identification, assessment, mitigation, and reporting
Maintain and govern the centralized risk register in the GRC tool and ensure timely updates across BUs through the BISOs and other corporate functions.
Define risk appetite, tolerance, and escalation mechanisms
Facilitate risk-based decision-making processes including Policy exception and risk acceptance processes and criteria.
Compliance & Regulatory Management
Ensure compliance with global and regional regulatory requirements (e.g., SOX ITGC, NIS2, DORA, GDPR, CRA as applicable)
Govern adherence to industry standards and certifications:
ISO 27001, ISO 22301, IS

📌 Senior Director Bengaluru
🏢 Unisys
📍 Bengaluru