Job Description
Governance, Risk & Compliance (GRC)_Practice Lead Position

Experience:
13+ Years

Location:
Bengaluru / Noida / Chennai / Hyderabad (Flexible) Role Overview We are seeking an experienced GRC Practice Head to lead and scale our Governance, Risk & Compliance practice. The individual will be responsible for driving business growth, solution development, consulting delivery, client engagement, capability building, and managing a high-performing GRC team. The ideal candidate should have robust expertise in cybersecurity governance, risk management, compliance frameworks, security consulting, and business leadership within a services organization.

Key Responsibilities
Practice Leadership
• Define and execute the vision, strategy, and roadmap for the GRC practice.
• Build and manage a portfolio of GRC services covering Governance, Risk Management, Compliance, Privacy, and Security Assurance.
• Establish delivery standards, methodologies, frameworks, and best practices.
• Drive practice profitability, utilization, and revenue growth. Business Development & Pre-Sales
• Partner with sales teams to identify, qualify, and pursue opportunities.
• Lead client presentations, workshops, solution discussions, and executive briefings.
• Develop proposals, SoWs, effort estimations, and commercial models.
• Own revenue targets and contribute to business expansion across industries. Consulting & Delivery Management
• Oversee end-to-end delivery of GRC engagements.
• Provide advisory services on enterprise risk management and regulatory compliance.
• Ensure compliance assessments, audits,



and remediation programs are delivered successfully.
• Act as an escalation point for critical client engagements. Governance & Compliance
• Lead assessments and implementation programs around:
• ISO 27001
• SOC 1 / SOC 2
• NIST CSF
• PCI-DSS
• GDPR
• HIPAA
• ISO 22301
• ISO 27701
• RBI, SEBI, IRDAI, MAS, UAE and other regional regulations
• Support clients in establishing governance models and compliance programs. Risk Management
• Define enterprise risk management frameworks and strategies.
• Conduct cyber risk assessments, third-party risk evaluations, and control maturity assessments.
• Drive risk mitigation and remediation initiatives.
• Develop risk dashboards and executive reporting mechanisms. People & Practice Development
• Build and mentor a high-performing team of consultants and architects.
• Drive recruitment, capability development, certifications, and career planning.
• Establish Centers of Excellence (CoEs) for GRC and Compliance services.
• Foster innovation and thought leadership. Required Skills & Expertise
• Deep expertise in Governance, Risk & Compliance frameworks.
• Strong understanding of cybersecurity, information security, and privacy domains.




• Experience in enterprise risk management and regulatory compliance programs.
• Exposure to cloud security governance across AWS, Azure, and GCP.
• Strong client-facing consulting and stakeholder management skills.
• Proven experience managing large-scale transformation and compliance programs.
• Excellent leadership, negotiation, and business development capabilities. Desired Certifications
• CISSP
• CISM
• CRISC
• CISA
• ISO 27001 Lead Implementer / Lead Auditor
• PCI-QSA (Preferred)
• CGEIT
• CDPSE
• PMP or PRINCE2 Preferred Industry Experience
• IT Services
• BFSI
• Healthcare
• Retail & E-commerce
• Manufacturing
• Telecom
• Public Sector / Government Qualifications
• Bachelor's degree in Engineering, Computer Science, Information Security, or related field.
• Master's degree (MBA/MS) preferred. Success Metrics
• Practice Revenue & Margin Growth
• New Logo Acquisition
• Delivery Excellence & Customer Satisfaction
• Compliance & Audit Success Rate
• Team Utilization & Capability Development
• Thought Leadership & Market Positioning Ideal Candidate Profile
• 13+ years of experience in Information Security, Cybersecurity Consulting, Risk Management, and Compliance.
• 5+ years leading a GRC practice, business unit, or consulting team.
• Proven track record of building and scaling cybersecurity consulting services.
• Experience managing CXO-level stakeholder relationships and large enterprise accounts.
• Strong balance of business leadership, consulting expertise, and delivery governance.

📌 ASSOCIATE DIRECTOR (Pune)
🏢 Happiest Minds Technologies
📍 Pune