At Straive, we believe effective cybersecurity is built on clear risk visibility, rigorous technical assurance, and pragmatic business alignment. We are looking for an experienced cybersecurity leader to serve as Senior Director – Cyber Risk & Technical Assurance. In this role, you will lead our enterprise GRC framework, drive deep technical security assessments, oversee our offensive security & vulnerability management programs, and provide operational oversight of our managed SOC partner. If you are a risk strategist with deep technical depth who knows how to translate technical findings into business decisions and measurable risk reduction, we want to hear from you. Key Priorities & Core Responsibilities 1. Enterprise GRC & Cyber Risk Management (Primary Focus)
• Governance & Frameworks: Establish, maintain, and mature Straive’s enterprise information security risk management framework (NIST RMF/CSF, ISO 27001/27005, FAIR).
• Material Risk Ownership: Ensure cyber risks are clearly quantified, articulated, and assigned to accountable business owners with actionable, time-bound treatment plans.
• Decision-Grade Risk Register: Maintain an enterprise-wide risk register spanning applications, cloud environments, third parties, and infrastructure.
• Executive & Board Reporting: Deliver concise risk insights, appetite definitions, and treatment metrics for executive leadership, governance forums, and the Board. 2. Offensive Security & Vulnerability Management
• Technical Assurance: Oversee penetration testing, red teaming, application security testing, and vulnerability assessments across cloud, identity, and infrastructure.
• Context-Driven Remediation: Drive remediation priorities based on exploitability, asset criticality, and threat intelligence—moving beyond straightforward severity ratings.
• Verified Resolution: Track high and critical exposures through retesting and verified closure, addressing root-cause control weaknesses. 3. SOC Oversight & Detection Assurance




• Managed Partner Oversight: Provide functional leadership over Straive’s managed SOC partner and threat monitoring operations.
• Coverage & Detection Health: Monitor silent log sources, ingestion gaps, and use-case coverage to align SOC detection capabilities with actual business risks.
• Efficacy Metrics: Measure SOC performance using true detection health and coverage indicators rather than raw alert volume. 4. Strategic Leadership & Business Alignment
• Team Leadership: Lead and mentor direct reports, including the Manager – Information Security Risk Management and Manager – Offensive Security & Vulnerability Management.
• Cross-Functional Collaboration: Partner with Technology, Legal, Engineering, Audit, Privacy, and Business Leadership to build repeatable security operations.
• Investment Business Cases: Connect proposed security spend directly to quantifiable risk reduction. What We Are Looking For
• Proven Leadership: 10+ years of progressive cybersecurity experience with significant time spent leading GRC, risk management, vulnerability management, or technical assurance teams.
• Deep GRC Expertise: Expert-level knowledge of risk frameworks (ISO 27001/27005, NIST CSF/RMF, FAIR) and experience building executive risk-governance structures.
• Offensive Security & SecOps Depth: Solid understanding of penetration testing, AppSec, cloud/identity security, and SecOps/SOC oversight.
• Pragmatic Business Mindset: Ability to challenge weak remediation, balance security needs with business enablement, and lead without relying solely on formal authority.
• Communication: Exceptional ability to translate complex technical risks into clear, business-focused executive narratives. Preferred Qualifications & Certifications
• Certifications: CISSP, CRISC, CISM, CCSP, OSCP, or equivalent.
•

Education:
Bachelor’s or Master’s degree in Cybersecurity, IT, Engineering, or a related field.
• Industry

Experience:
Experience in a global, technology-enabled services or client-facing environment

📌 Senior Director (Chennai)
🏢 Straive
📍 Chennai