The Role :
Governance, Risk and Compliance Lead
Responsible for leading and maturing ION Group's governance, risk management and compliance capabilities. The role will oversee the Information Security Management System (ISMS), maintain regulatory and certification compliance, drive risk governance activities, manage customer assurance programmes, and ensure security policies and standards are effectively implemented across the organisation.
The successful candidate will have extensive experience operating within large, complex enterprises and demonstrate a proven track record of achieving and maintaining ISO 27001 certification, implementing risk management frameworks, responding to customer and regulatory audits, and building effective governance programmes.
n

Key responsibilities:
Governance & Policy Management
Own the lifecycle management of Information Security policies, standards, frameworks and procedures.
Develop, review and maintain governance documentation to ensure alignment with business objectives and regulatory requirements.




Establish governance processes to ensure policies, standards and controls are consistently implemented across the organisation.
Monitor adherence to security policies and standards and drive remediation of non-compliance findings.
Information Security Management System (ISMS)
Lead the ongoing maintenance, effectiveness and continual improvement of the Information Security Management System (ISMS).
Drive ISO 27001 certification & recertification activities and ensure certification evidence, control documentation and audit records are maintained and auditable.
Coordinate internal audit programmes, external certification audits and remediation activities.
Risk Management
Own and continuously improve the enterprise information security risk management framework.
Maintain and oversee the Group Security Risk Register. Facilitate risk identification, assessment, treatment, acceptance and reporting activities across business units.
Client

📌 GRC Lead (India)
🏢 ION Group
📍 India