About SilverskillsYour partner in building intelligent processes! We are a leading service provider in Commercial Real Estate, Engineering and Relocation services. We help you re-energize your business from inside out and empower your people with innovative processes through efficient solutions and digital transformation.

We offer an entire spectrum of services starting from claims processing to high-end analytics and knowledge management services. This enables you to focus on your core business while we take care of your operations. We have successfully transitioned ‘never-done-before’ processes to India such as relocation services, commercial real estate, and claims adjudication among others.

With over 20 years of experience, Silverskills & its associate companies have been instrumental in transforming the processes of our clients, including the Fortune 100 companies, based in the USA, EMEA, APAC, & Canada.

About the roleThe GRC (Governance, Risk & Compliance) lead will act as SME providing expertise and guidance across various standards. The incumbent will coordinate and perform security assessment of client IT infrastructure and review information security policies and associated procedure documents in accordance with regulatory and statutory information security guidelines and other information security standards, frameworks and applicable Acts. The incumbent will work with clients, internal teams, and regulatory agencies to provide supportive documentation as applicable.

S/he shall be responsible in interacting with existing/new clients for creating new solutions for delivery service.

Responsibilities· Lead the team of GRC professionals and executing advisory & consulting projects (client facing) around regulatory risk & compliances such as ISO 27001, IRDAI & ISNP, UIDAI, SOX ITGC, PCI-DSS, HIPAA, Data Privacy etc.





· Oversee the delivery of services related to pre-preparedness for an information security audit (ISO 27001, IRDAI, ISNP, PCI DSS, GDPR etc.), risk management, vendor risk management and security awareness

· Document, review and update information security policies and associated procedure documentation at client end

· Assess the security controls and practices (policies, procedures etc.) to identify the non-compliant

· Collaborate with other departments to ensure compliance with regulatory requirements, such as HIPAA, GDPR, and PCI-DSS

· Develop knowledge base, re-usable components for GRC advisory services

· Responsible for development and enhancements of GRC services, team and delivery capabilities.

· Develop competency in GRC platforms (design, architecture, development & support. Participate in pre- sales activities for client RFPs/RFIs

Requirements· Bachelor's degree in cybersecurity, computer science, information technology, or a related field

· 8-10 years of experience in governance, risk & compliance and vendor risk management

· Experience in managing and leading a team of GRC professionals

· Excellent communication, leadership, and interpersonal skills, with the ability to articulate complex cybersecurity concepts to non-technical stakeholders

· CISA, CISSP, CISM certifications are added advantage

· Basic understanding of Information Security and standards such as ISO 27001, NIST, CIS, SANS, CSA

· Knowledge of regulatory compliances such as IRDAI & ISNP, UIDAI, SOX, PCI etc

· Positive knowledge of Risk Management and Control Auditing principles

· Knowledge of Data Privacy Requirements and Cyber Laws across countries.

· Technical knowledge of security principles around Network Security, Perimeter Security, Data Security, End User System Security etc.

· Technical knowledge on Cloud Security, Threat analysis, VA/PT

📌 Manager - Governance, Risk & Compliance (Gurugram)
🏢 Life at Silverskills
📍 Gurugram