: Governance, Risk & Compliance (GRC)_Practice Lead Position

Experience: 13+ Years

Location: Bengaluru / Noida / Chennai / Hyderabad (Adaptable)

Role Overview

We are seeking an experienced GRC Practice Head to lead and scale our Governance, Risk & Compliance practice. The individual will be responsible for driving business growth, solution development, consulting delivery, client engagement, capability building, and managing a high-performing GRC team. The ideal candidate should have strong expertise in cybersecurity governance, risk management, compliance frameworks, security consulting, and business leadership within a services organization.

Key Responsibilities

Practice Leadership

- Define and execute the vision, strategy, and roadmap for the GRC practice.
- Build and manage a portfolio of GRC services covering Governance, Risk Management, Compliance, Privacy, and Security Assurance.
- Establish delivery standards, methodologies, frameworks, and best practices.
- Drive practice profitability, utilization, and revenue growth.

Business Development & Pre-Sales

- Partner with sales teams to identify, qualify, and pursue opportunities.
- Lead client presentations, workshops, solution discussions, and executive briefings.
- Develop proposals, SoWs, effort estimations, and commercial models.
- Own revenue targets and contribute to business expansion across industries.

Consulting & Delivery Management

- Oversee end-to-end delivery of GRC engagements.
- Provide advisory services on enterprise risk management and regulatory compliance.
- Ensure compliance assessments, audits,



and remediation programs are delivered successfully.
- Act as an escalation point for critical client engagements.

Governance & Compliance

- Lead assessments and implementation programs around:
- ISO 27001
- SOC 1 / SOC 2
- NIST CSF
- PCI-DSS
- GDPR
- HIPAA
- ISO 22301
- ISO 27701
- RBI, SEBI, IRDAI, MAS, UAE and other regional regulations

- Support clients in establishing governance models and compliance programs.

Risk Management

- Define enterprise risk management frameworks and strategies.
- Conduct cyber risk assessments, third-party risk evaluations, and control maturity assessments.
- Drive risk mitigation and remediation initiatives.
- Develop risk dashboards and executive reporting mechanisms.

People & Practice Development

- Build and mentor a high-performing team of consultants and architects.
- Drive recruitment, capability development, certifications, and career planning.
- Establish Centers of Excellence (CoEs) for GRC and Compliance services.
- Foster innovation and thought leadership.

Required Skills & Expertise

- Deep expertise in Governance, Risk & Compliance frameworks.
- Strong understanding of cybersecurity, information security, and privacy domains.




- Experience in enterprise risk management and regulatory compliance programs.
- Exposure to cloud security governance across AWS, Azure, and GCP.
- Strong client-facing consulting and stakeholder management skills.
- Proven experience managing large-scale transformation and compliance programs.
- Excellent leadership, negotiation, and business development capabilities.

Desired Certifications

- CISSP
- CISM
- CRISC
- CISA
- ISO 27001 Lead Implementer / Lead Auditor
- PCI-QSA (Preferred)
- CGEIT
- CDPSE
- PMP or PRINCE2

Preferred Industry Experience

- IT Services
- BFSI
- Healthcare
- Retail & E-commerce
- Manufacturing
- Telecom
- Public Sector / Government

Qualifications

- Bachelor's degree in Engineering, Computer Science, Information Security, or related field.
- Master's degree (MBA/MS) preferred.

Success Metrics

- Practice Revenue & Margin Growth
- New Logo Acquisition
- Delivery Excellence & Customer Satisfaction
- Compliance & Audit Success Rate
- Team Utilization & Capability Development
- Thought Leadership & Market Positioning

Ideal Candidate Profile

- 13+ years of experience in Information Security, Cybersecurity Consulting, Risk Management, and Compliance.
- 5+ years leading a GRC practice, business unit, or consulting team.
- Proven track record of building and scaling cybersecurity consulting services.
- Experience managing CXO-level stakeholder relationships and large enterprise accounts.
- Strong balance of business leadership, consulting expertise, and delivery governance.

📌 ASSOCIATE DIRECTOR - GRC/DRAC (Pune)
🏢 Happiest Minds Technologies
📍 Pune