Company Name: VARITE India Private Limited

About The Client

Client is a global technology solution and services leader providing business-friendly solutions, that enable future-readiness for clients. We seamlessly bring together digital expertise, strong industry-specific alliances, and deep domain expertise from ITC Group businesses. Our solutions and services are focused on Banking and financial Services, Healthcare, Manufacturing, Consumer Goods, Travel and Hospitality.

ITC Infotech is a wholly-owned subsidiary of ITC Ltd, one of India’s most admired companies.

About The Job:

- ITCI Cyber Security team is looking for the role which is accountable for leading the organization’s end-to-end vulnerability lifecycle and aligning risk and compliance efforts with regulatory mandates such as RBI Master Directions and SEBI Cybersecurity Framework.

- The individual will ensure timely vulnerability detection, validation, remediation governance, and risk-based prioritization.

- The role also anchors all compliance readiness activities across cybersecurity, translating control gaps into actionable security initiatives while coordinating with internal and external audit functions.

Essential Job Functions:

- Lead the overall vulnerability management lifecycle across infra and application assets (VM, risk scoring, remediation tracking).

- Own end-to-end delivery of VM scans, validation cycles, and risk-based prioritization using tools like Tenable/Nessus.

- Map vulnerabilities to business risk and generate executive-level dashboards with risk exposure summaries.





- Define and maintain risk treatment plans per RBI and SEBI frameworks, coordinating with infra and app teams.

- Conduct compliance checks, technical control validations, and support readiness for RBI/SEBI/ISO audits.

- Perform monthly risk posture reviews, threat trend reporting, and mitigation progress evaluations.

- Oversee gap assessments against RBI Master Direction, SEBI circulars, and DPDP data security provisions.

- Provide expertise in documenting technical controls, ISMS artifacts, and audit trails for internal and external audits.

- Engage with stakeholders to establish security exceptions, compensating controls, and policy deviation approvals.

- Build and maintain GRC tools and risk registers with role-based access and automated updates.

Qualifications:

- 10+ years in cyber risk management, vulnerability assessment, and compliance delivery.

- Strong experience with Tenable/Nessus, Qualys, and GRC tools.

- ISO 27001 Lead Auditor, CRISC, or CISA certified.

- In-depth knowledge of RBI Master Direction on IT Framework, SEBI Cybersecurity Guidelines.

- Strong skills in risk quantification, reporting, and policy enforcement.

How to Apply:



Interested candidates are encouraged to respond/submit their updated resumes, and for additional job opportunities, please visit Jobs In India – VARITE.

Unlock Rewards: Refer Candidates and Earn.

If you're not available or interested in this opportunity, please pass this along to anyone in your network who might be a good fit and interested in our open positions. VARITE offers a Candidate Referral program, where you'll receive a one-time referral bonus based on the following scale if the referred candidate completes a three-month assignment with VARITE.

Experience Level Bonus Referral:

0-2 years

INR 5,000

2-6 years

INR 7,500

6+ years

INR 10,000

About VARITE: VARITE is a global staffing and IT consulting company providing technical consulting and team augmentation services to Fortune 500 Companies in USA, UK, CANADA and INDIA. VARITE is currently a primary and direct vendor to the leading corporations in the verticals of Networking, Cloud Infrastructure, Hardware and Software, Digital Marketing and Media Solutions, Clinical Diagnostics, Utilities, Gaming and Entertainment, and Financial Services.

Equal Opportunity Employer:

VARITE is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive setting for all employees. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, veteran status, or disability status.

📌 VM Risk and Compliance (Mumbai)
🏢 VARITE
📍 Mumbai