GRC Manager - India

This is a high-impact opportunity for a hands-on GRC qualified ready to become the day-to-day owner of a high-profile global compliance programe. TalenTeam is already ISO 27001 certified and uses Vanta, so you will not be starting from a blank page. You will strengthen what is already working, help us add SOC 2 and ISO 42001 with specialist support, make compliance easier for our teams and build confidence with enterprise customers.

Company Description TalenTeam is a premier SAP SuccessFactors partner focused on skills technology that drives digital workforce transformation. With proven experience across more than 120 organizations, the company delivers innovative digital solutions that simplify HR processes and strengthen skills development. TalenTeam designs cutting-edge applications and seamless integrations that help customers maximize their SAP SuccessFactors investments.

Through award-winning projects, the organization enables clients to build agile, skills-based businesses that are ready for the future.

Joining

TalenTeam provides the opportunity to work with leading HR technology and contribute to impactful transformation initiatives.

Role Description The GRC Manager role is a full-time, remote position responsible for overseeing governance, risk, and compliance activities across TalenTeam’s operations and solutions. Day-to-day tasks include developing and maintaining GRC frameworks, policies, and procedures aligned with regulatory standards and industry best practices. The GRC Manager will assess and monitor risk exposure, perform control testing, coordinate audits, and track remediation plans with internal stakeholders.

This role will collaborate closely with technology, security, legal, and HR teams to ensure compliance in areas such as data protection, information security, and vendor management. The GRC Manager will also prepare reports and metrics for leadership, provide guidance on regulatory changes, and support continuous improvement of compliance processes.

Responsibilities:

- Maintain our existing ISO 27001 certification, including the audit calendar, management reviews,



policies, risk treatment, internal checks, corrective actions and external audit coordination.
- Coordinate SOC 2 and other agreed framework work, including ISO 42001, using the existing ISO 27001 controls wherever possible and working with Vanta, Cognisys and independent auditors for specialist guidance.
- Own Vanta day-to-day: keep integrations working, review evidence quality, investigate failed checks, record approved exceptions and make sure issues reach the right owner.
- Maintain the security risk register and policy set, test whether controls work and turn findings into clear actions, deadlines and follow-up checks.
- Draft, maintain and communicate compliance-related policies and supporting compliance information. Product and Operations leadership will own the broader AI governance approach and decisions.
- Lead customer assurance, including security questionnaires, RFP responses, customer audits and reusable approved answers and supporting information.
- Coordinate privacy checks for employee, candidate, customer, and product data across relevant markets, and escalate formal legal or DPO questions to the appropriate specialist.
- Manage the day-to-day relationships with vendors and other specialists, leveraging their expertise on new frameworks and complex issues while maintaining routine programme coordination within TalenTeam.

Qualifications

- Hands-on involvement in at least one ISO 27001 implementation, surveillance or recertification cycle, including management review, risk treatment, control-owner follow-up and external audit coordination.
- Hands-on experience with Vanta required. You should be comfortable managing integrations, controls, evidence, tests, risks,



exceptions and remediation workflows within the platform.
- Practical exposure to recognised security frameworks, with an understanding of control design, operating evidence, exceptions, remediation and external assurance.
- Enough technical understanding to work credibly with Product on cloud, identity, source control, secure development and vulnerability-management evidence.
- The ability to learn and coordinate a new framework using structured guidance from vendors (i.e Vanta, Cognisys) and external auditors.
- Strong judgement: you prioritise material risks, propose practical alternatives and are transparent about weaknesses rather than hiding them until an audit.
- Clear communication with Product, business owners, customers, auditors and senior leaders, including security questionnaires and RFPs.
- Strong expertise in governance, risk management, and compliance frameworks (e.g., ISO 27001, SOC 2, GDPR, data privacy regulations).
- Experience designing and implementing risk assessment methodologies, controls, and monitoring processes in a technology or SaaS environment.
- Knowledge of information security principles, compliance tools, and internal audit practices, including control testing and documentation.
- Ability to interpret regulatory and contractual requirements and translate them into practical policies, procedures, and guidelines.
- Excellent analytical, problem-solving, and stakeholder management skills, with the capacity to influence and educate cross-functional teams.
- Clear written and verbal communication skills, including experience creating reports, dashboards, and executive-level presentations.
- Background in HR technology, cloud solutions, or SAP SuccessFactors implementations is highly beneficial.
- Bachelor’s degree in a relevant field (such as Information Security, Business, Law, or IT); professional certifications (e.g., CISA, CISM, CRISC, CISSP) are an advantage.
- Ability to work independently in a remote setting, prioritize multiple initiatives, and maintain high standards of integrity and confidentiality.

📌 GRC Manager (India)
🏢 TalenTeam
📍 India