Key Responsibilities

1. Governance & Compliance Management
2. Lead and manage ISO 27001, ISO 27701 certification and surveillance activities across India and the Middle East.
3. Coordinate SOC 2 audit readiness, evidence collection, and audit support activities.
4. Manage security policies, standards, procedures, and governance documentation.
5. Monitor compliance with firm security policies and regulatory requirements.

6. Risk Management
7. Maintain and manage the enterprise information security risk register.
8. Facilitate risk assessments, risk reviews, and risk treatment activities.
9. Track remediation of identified risks and compliance findings.
10. Prepare risk dashboards and reports for management review.

11. Third Party Risk Management
12. Manage the Third-Party Risk Management (TPRM) program.
13. Conduct vendor security assessments and risk reviews.
14. Review vendor security documentation, security questionnaires, and compliance evidence.
15. Track remediation of third-party security findings and exceptions.
16. Data Protection & Regulatory Compliance
17. Support governance activities related to DPDP Act, GDPR, PDPL, and other applicable privacy regulations.
18. Coordinate with the DPO and relevant stakeholders on privacy compliance initiatives.
19. Maintain compliance records, trackers, and regulatory reporting requirements.
20. Support vendor DPA administration and contractual compliance monitoring.
21. Audit & Assurance
22. Coordinate internal audits, external audits,



and compliance assessments.
23. Track audit observations, findings, and remediation activities.
24. Ensure evidence and documentation are maintained for certification and audit requirements.
25. Support client assessments, due diligence reviews, and compliance questionnaires.
26. Reporting & Stakeholder Management
27. Prepare GRC dashboards, compliance reports, and management updates.
28. Present program status, risks, and compliance metrics to leadership committees.
29. Collaborate with business, technology, legal, and operational teams to drive compliance initiatives.
30. Monitor regulatory developments and recommend necessary changes to the compliance framework.

Qualifications & Experience
- Bachelors degree in information technology, Information Security, Business Administration, Law, Risk Management, or a related discipline.
- 7-10 years of experience in Information Security Governance, Risk Management, Compliance, Audit, or related functions.
- Experience managing ISO 27001 certification programs and audit activities.
- Experience supporting SOC 2 compliance and evidence management programs.
- Experience conducting risk assessments and maintaining risk registers.
- Experience managing third-party risk management and vendor security assessments.
- Understanding of DPDP Act, GDPR, ISO 27001, SOC 2, and related regulatory requirements.
- Robust stakeholder management, communication, and program management skills.

📌 GRC Manager (Coimbatore)
🏢 protiviti india
📍 Coimbatore