We're Hiring | Cyber GRC & Privacy Lead

Location: Mumbai (Work From Office)

Experience: 5–10 Years

Industry: FinTech / Cryptocurrency Exchange

We are looking for an experienced Cyber GRC & Privacy Lead to drive cybersecurity governance, risk management, regulatory compliance, and data privacy initiatives in a fast-paced FinTech environment.

Key Responsibilities:

- Lead cybersecurity Governance, Risk & Compliance (GRC) initiatives.
- Drive compliance with ISO 27001:2022, India's DPDP Act, CERT-In, and applicable RBI/SEBI guidelines.
- Conduct enterprise-wide cybersecurity risk assessments and manage risk mitigation plans.
- Manage internal and external security audits, compliance assessments, and remediation activities.
- Lead Third-Party Risk Management (TPRM) and vendor security assessments.
- Collaborate with Security, DevOps, Infrastructure, Legal, and Product teams to strengthen security and privacy controls.
- Develop compliance dashboards, risk reports, and security awareness initiatives.





Required Skills & Experience:

- 5–10 years of experience in Information Security, Cyber GRC, IT Audit, or Data Privacy.
- Robust hands-on expertise in ISO 27001, DPDP Act, risk assessments, and compliance audits .
- Understanding of cloud security (preferably AWS), ITGC, SaaS environments, and NIST frameworks.
- Experience in vendor risk management, security controls, and regulatory compliance.
- Strong stakeholder management, communication, and documentation skills.

Preferred Qualifications:

- Certifications such as CISA, CISM, CISSP, CDPSE, or ISO 27001 Lead Auditor/Implementer.
- Prior experience in FinTech, cryptocurrency exchanges, digital banking, or other regulated financial environments.
- Knowledge of blockchain technology and digital asset security is an added advantage.

📌 Cyber GRC & Privacy Lead (Mumbai)
🏢 Remotestar
📍 Mumbai