Cyber Security Manager

Greetings from Peoplefy!

About the Role

We are looking for a Cyber GRC Manager to join the cybersecurity team of a fast-growing global technology organization. The role will be responsible for developing and managing Governance, Risk, and Compliance (GRC) frameworks, conducting cyber risk assessments, supporting audits, and ensuring adherence to regulatory and industry standards.

This role requires strong experience in cyber risk management, security compliance, vendor risk, and GRC tools, along with the ability to collaborate with internal teams and external stakeholders.

Experience - 8-14 years

Location - Thiruvananthapuram

Requirement:

Governance, Risk & Compliance (GRC)

• Develop and implement cybersecurity GRC frameworks aligned with NIST, ISO 27001, GDPR, and similar standards
• Own and manage Trust Center and Cyber GRC controls under the overall controls framework
• Continuously enhance risk management and compliance processes

Cyber Risk Assessments & Audits

• Conduct cyber risk assessments and support internal / external audits
• Evaluate security controls, policies, and compliance posture
• Identify gaps and recommend remediation actions
• Provide documentation and evidence for certifications and audits

Vendor Risk Management

• Perform vendor risk assessments focusing on information security and cybersecurity practices
• Ensure vendors meet defined cybersecurity requirements
• Work with internal teams and clients on vendor risk mitigation

Regulatory Compliance Monitoring

• Track changes in cybersecurity regulations and industry standards
• Ensure compliance with applicable laws and frameworks
• Update policies, procedures, and controls accordingly

Policy Development

• Develop, review, and maintain cybersecurity policies and procedures
• Ensure policies are communicated and implemented across the organization
• Update policies based on new threats and regulatory changes

Reporting & Risk Mitigation

• Prepare reports on cybersecurity risks, compliance status, and audit findings
• Work with IT, Security, Legal, and Compliance teams to mitigate risks
• Improve overall cybersecurity posture of the organization

Required Skills & Experience

• Bachelors degree in Computer Science / Information Security / related field
• 6+ years of experience in Cybersecurity Governance, Risk, or Compliance
• Strong knowledge of GRC frameworks (NIST, ISO 27001, GDPR, SOC2 etc.)
• Experience in Cyber Risk Assessments and Security Audits
• Experience in Vendor Risk Management (Information Security focus)
• Experience with GRC tools / compliance platforms preferred

Interested candidates please share your resumes on amruta.bu@peoplefy.com