HRPlacers is hiring an experienced Cyber Security Manager – GRC for an established business group based in Navi Mumbai.

The ideal candidate should have strong experience in information security governance, risk management, regulatory compliance, security audits and cybersecurity documentation.

This position requires a professional who can develop security frameworks, implement policies, coordinate audits and ensure organizational compliance with established cybersecurity standards.

Key Responsibilities

- Security Governance: Develop, implement and maintain information security policies, procedures, standards and SOPs across the organization.
- Risk Management: Conduct cybersecurity risk assessments, identify security gaps, maintain risk registers and coordinate mitigation activities.
- Compliance & Frameworks: Implement and monitor compliance with ISO 27001, NIST and applicable cybersecurity regulations and industry standards.
- Security Audits: Coordinate internal and external security audits, track observations, prepare documentation and ensure timely closure of audit findings.
- Security Documentation: Maintain cybersecurity policies, compliance reports, risk assessment documents, audit records and management reporting.
- Security Operations Oversight: Coordinate with SOC and IT security teams to review security incidents, vulnerabilities, monitoring reports and corrective actions.
- Access & Identity Management: Oversee IAM/PAM controls, user-access reviews, privileged access policies and related security requirements.
- Vulnerability Management: Coordinate VAPT activities, review findings and track remediation with technical teams.
- Business & OT Security:



Support cybersecurity risk assessment and compliance requirements for business applications, infrastructure and operational technology environments.
- Stakeholder Coordination: Work with IT teams, auditors, vendors and management to strengthen the organization's overall cybersecurity posture.

Required Qualifications & Experience
- B.E. / B.Tech in Computer Science, IT, Cybersecurity or a related discipline.
- 6–8 years of relevant cybersecurity experience, preferably with substantial exposure to GRC.
- Robust practical knowledge of ISO 27001, NIST, cybersecurity risk management and compliance frameworks.
- Hands-on experience preparing security policies, SOPs, risk registers, audit documentation and compliance reports.
- Experience coordinating internal/external audits and managing corrective actions.
- Understanding of SOC operations, incident management, IAM/PAM, VAPT and security controls.
- Ability to coordinate cybersecurity activities across IT infrastructure, applications and business operations.
- Excellent documentation, analytical, communication and stakeholder management skills.

Preferred Candidate Profile
- Strong experience in cybersecurity governance, risk and compliance rather than purely operational SOC monitoring.
- Experience implementing information security frameworks and managing audit requirements.
- Familiarity with enterprise IT infrastructure and operational technology security.
- Professional certifications such as CISM, CISA or ISO 27001 Lead Auditor/Implementer will be an advantage.
- Ability to work independently, coordinate multiple stakeholders and report to senior IT management.
- Candidates from any industry with relevant GRC experience may apply.

Pay: ₹2,000,000.00 - ₹2,200,000.00 per year

Work Location: In person

📌 Cyber Security Manager – Governance, Risk & Compliance (GRC) (Sanpada)
🏢 HR Placers
📍 Sanpada