Immediate /Short Notice Only - Cerebra Payroll - MNC Client
[email protected]
Only Whatsapp: (phone hidden)
Cyber Security GRC | Vendor Risk Assessment
Location: Gurgaon
Experience: 912 Years
Role Overview
We are looking for an experienced Cyber Security GRC / Cyber Risk professional with robust expertise in enterprise risk management, cybersecurity frameworks, governance, vendor risk assessment, and second-line-of-defence oversight.
Key Responsibilities
Cyber Risk Framework & Assessment
- Apply enterprise and cyber risk management frameworks across governance and risk activities.
- Work extensively with
- NIST RMF
- ISO 27005
- ISO 31000
- ISO 21434
- Embed risk frameworks into organisational risk methodologies and assessments.
- Identify gaps and inefficiencies in existing risk management practices.
- Recommend improvements to risk processes, templates, and methodologies.
Second Line of Defence
- Review and challenge first-line risk assessments.
- Assess control effectiveness ratings, KRI breaches, remediation plans, and risk submissions.
- Validate the quality of risk and control data.
- Translate technical cybersecurity risks into business impact.
Risk Reporting & Executive Communication
- Prepare executive-ready risk summaries and decision-support briefs.
- Develop risk dashboards, heatmaps, and trend reports.
- Provide impact analysis and quantified risk exposure.
- Highlight risk-to-business implications for senior management.
KRI / KCI Management
- Track and report KPIs falling outside SLA.
- Develop and maintain Key Risk Indicators (KRIs) and Key Control Indicators (KCIs).
- Define thresholds, ownership, and measurement criteria.
- Monitor risk trends, escalations, and deviations.
Governance
- Establish and manage governance forums end-to-end.
- Prepare agendas and facilitate governance meetings.
- Document minutes and track actions through closure.
- Drive continuous improvement and risk culture reinforcement.
📌 Cyber Security GRC | Vendor Risk Assessment (Gurugram)
🏢 Cerebra
📍 Gurugram