Governance, Risk & Compliance (GRC) Expert

Summary
We are seeking a seasoned Governance, Risk & Compliance (GRC) Expert to lead our strategic initiatives in safeguarding organizational assets and ensuring adherence to global regulatory frameworks. This pivotal role is dedicated to fortifying our security posture by overseeing comprehensive risk management protocols, driving the implementation of robust information security management systems, and fostering a culture of cybersecurity awareness across the enterprise. The successful candidate will serve as a critical advisor to leadership, ensuring that all operations align with industry best practices and legal mandates while mitigating potential threats through proactive assessment and control strategies.
Responsibilities

- Spearhead the management of third-party vendor risks, ensuring all external partners meet our stringent security and compliance standards.

- Direct the lifecycle of information asset management, maintaining strict oversight of data classification, protection, and governance.

- Design and execute enterprise-wide cybersecurity awareness programs to educate staff on threat recognition and secure behavior.

- Lead complex security-focused projects from conception to completion, ensuring timely delivery and alignment with business objectives.

- Interpret and apply GDPR and other regulatory requirements to maintain full legal compliance across all business units.

- Develop, update, and enforce information security policies,



standards, and governance frameworks to support organizational resilience.

- Oversee the end-to-end implementation of Information Security Management Systems (ISMS) and the deployment of necessary security controls.

- Conduct thorough cyber risk assessments to identify vulnerabilities, followed by the execution of targeted mitigation strategies to reduce exposure.

- Ensure continuous compliance with international standards including ISO 27001, NIST Cybersecurity Framework, GovS 007, and Cyber Essentials.

RequirementsRequirements:

- Possess 3-6 years of skilled experience within the IT Services sector, with a proven track record in governance, risk, and compliance functions.

- Demonstrate deep expertise in Third-Party Risk Management and Information Asset Management methodologies.

- Show strong capability in delivering Cybersecurity Awareness & Training initiatives and managing Security Projects effectively.

- Maintain up-to-date knowledge of GDPR and other critical regulatory requirements affecting data privacy and security.

- Exhibit proficiency in establishing Information Security Governance, drafting Policies & Standards, and implementing ISMS frameworks.

- Have hands-on experience with Security Controls, performing Cyber Risk Assessessments, and driving Mitigation & Compliance programs.

- Be well-versed in major compliance standards such as ISO 27001, NIST CSF, GovS 007, and Cyber Essentials.

📌 Governance, Risk & Compliance (GRC) Expert (India)
🏢 Vrinda International
📍 India