We're Hiring | Cyber GRC & Privacy Lead

Location: Mumbai (Work From Office)

Experience: 5–10 Years

Industry: FinTech / Cryptocurrency Exchange

We are looking for an experienced Cyber GRC & Privacy Lead to drive cybersecurity governance, risk management, regulatory compliance, and data privacy initiatives in a fast-paced FinTech workplace.

Key Responsibilities:
Lead cybersecurity Governance, Risk & Compliance (GRC) initiatives.
Drive compliance with ISO 27001:2022, India's DPDP Act, CERT-In, and applicable RBI/SEBI guidelines.
Conduct enterprise-wide cybersecurity risk assessments and manage risk mitigation plans.
Manage internal and external security audits, compliance assessments, and remediation activities.
Lead Third-Party Risk Management (TPRM) and vendor security assessments.
Collaborate with Security, DevOps, Infrastructure, Legal, and Product teams to strengthen security and privacy controls.
Develop compliance dashboards, risk reports,



and security awareness initiatives.

Required Skills & Experience:
5–10 years of experience in Information Security, Cyber GRC, IT Audit, or Data Privacy.
Robust hands-on expertise in ISO 27001, DPDP Act, risk assessments, and compliance audits.
Understanding of cloud security (preferably AWS), ITGC, SaaS environments, and NIST frameworks.
Experience in vendor risk management, security controls, and regulatory compliance.
Solid stakeholder management, communication, and documentation skills.

Preferred Qualifications:
Certifications such as CISA, CISM, CISSP, CDPSE, or ISO 27001 Lead Auditor/Implementer.
Prior experience in FinTech, cryptocurrency exchanges, digital banking, or other regulated financial environments.
Knowledge of blockchain technology and digital asset security is an added advantage.

📌 Cyber Grc & Privacy Lead Mumbai (India)
🏢 Remotestar
📍 India