Information Security & GRC Manager

Key Responsibilities

- Lead Information Security Governance, ISMS, policies, and risk management programs.

- Drive compliance initiatives across ISO 27001, SOC 2, GDPR, HIPAA, DPDP, and other regulatory frameworks.

- Manage internal/external audits, customer security assessments, and remediation activities.

- Oversee enterprise risk assessments, third-party/vendor security reviews, and privacy compliance.

- Act as the primary contact for customer security questionnaires, audits, and assurance activities.

- Present security posture, risks, and compliance updates to leadership and stakeholders.

- Lead security awareness programs and foster a solid security culture.

- Mentor and manage the Information Security & GRC team.





Experience & Qualifications

- Bachelor's degree in IT, Computer Science, Engineering, or related field (Master's preferred).

- 12-15 years of experience in Information Security, GRC, Risk, Compliance, or Audit functions.

- Minimum 5 years of team management experience.

- Strong expertise in ISO 27001, Risk Management, Security Governance, Compliance, Privacy, Customer Assurance, and Third-Party Risk Management.

Certifications

- Required: ISO 27001 Lead Auditor or Lead Implementer

- Preferred: CISM, CISSP, or CISA

📌 Information Security Manager (Bengaluru)
🏢 TheMathCompany
📍 Bengaluru