Role : Cyber Security GRC

Location : Hyderabad

Experience : 7+ Years

Job Summary :

We are looking for an experienced Cyber Security GRC (Governance, Risk & Compliance) Professional to drive governance initiatives related to application security, vulnerability management, audit compliance, and operational risk. The ideal candidate should possess strong expertise in Application GRC, risk frameworks, IT governance, vulnerability remediation, and cross-functional stakeholder management.

Key Responsibilities :

- Drive Governance, Risk, and Compliance (GRC) initiatives across enterprise applications.

- Govern vulnerability remediation activities and ensure timely closure of security findings.

- Manage application and infrastructure risk in alignment with organizational security policies.

- Implement and monitor security control frameworks and compliance requirements.

- Coordinate audit activities, MRA responses, and compliance deliverables.

- Collaborate with Infrastructure, Security, Development, and Operations teams to ensure governance objectives are achieved.

- Track governance metrics, vulnerability dashboards, remediation timelines, and compliance reports.

- Participate in Agile delivery and coordinate security requirements across project teams.

- Support Incident, Change, and Release Management processes within ITSM frameworks.

- Drive continuous improvements in governance, automation, and operational compliance.

Mandatory Skills :

- 7+ years of experience in Cyber Security Governance, Risk & Compliance (GRC).

- Strong expertise in Application GRC.

- Experience implementing security frameworks such as :

1. NIST

2. ISO 27001

Experience with :

- Audit compliance

- MRA deliverables

- Risk assessments

- Control execution

- Hands-on experience in :

1. Vulnerability Management

2. Infrastructure & Application Patching

3. Remediation tracking

- Strong knowledge of ITSM processes :

1. Incident Management

2. Change Management

3. Release Management

- Experience working in Agile/Scrum environments.

- Strong stakeholder management and cross-functional coordination skills.

Technical exposure to :

- Linux

- Windows

- Unix

- SQL

- Experience with configuration management and automation tools :

1. Ansible

2. BladeLogic

3. SCCM

Preferred Skills :

- ITIL Certification

- CSM / PSM

- CISSP

- CISA

- Security or Vulnerability Management Certifications

- JIRA

- CI/CD Automation

- Enterprise Monitoring Tools

- Infrastructure Automation

- API Integration

- High-Level Design (HLD)

- Low-Level Design (LLD)

Required Qualifications :

- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.

- Proven experience in application risk management, governance, and compliance.

- Strong analytical, reporting, documentation, and communication skills.

- Ability to coordinate across multiple technology and business teams.

- Experience driving vulnerability remediation and governance metrics in enterprise environments.