Role Overview :

We are seeking a seasoned professional to lead our GRC, Risk, and Security function based in Mumbai. In this pivotal role, you will serve as the primary architect of our organizational resilience, overseeing the convergence of IT governance, cyber security, and regulatory compliance within a fast-paced NBFC environment. You will work closely with the C-suite, internal audit committees, and cross-functional technology teams to translate complex risk landscapes into actionable business strategies. By fostering a culture of proactive security, you will directly influence our operational integrity, safeguarding our digital assets and ensuring seamless adherence to evolving financial regulations, ultimately driving trust with our customers and stakeholders.

Key Responsibilities :

- Design and implement a robust GRC framework that aligns with industry standards to ensure the organization remains audit-ready and compliant with regulatory mandates.

- Lead comprehensive vulnerability management and cyber security initiatives to protect critical infrastructure from emerging threats and sophisticated attack vectors.

- Manage the end-to-end IT audit lifecycle, coordinating with internal and external stakeholders to identify control gaps and drive timely remediation.

- Oversee IT governance policies and procedures, ensuring that technology investments support business objectives while maintaining a rigorous risk-appetite threshold.

- Collaborate with senior leadership to provide strategic insights on the evolving threat landscape, enabling informed decision-making regarding long-term security investments.

Required Skillset :

- Demonstrated expertise in managing complex GRC, IT Risk, and Security frameworks within the NBFC or financial services sector, ensuring alignment with ISO 27001 and other global standards.

- Proven ability to communicate technical risk assessments to non-technical stakeholders, bridging the gap between security requirements and business operational needs.

- Strong proficiency in vulnerability management, IT compliance, and audit methodologies, supported by professional certifications such as CISSP, CISA, or equivalent.

- Exceptional leadership capabilities, with a track record of mentoring high-performing teams and fostering a collaborative, security-first culture across the organization.

- Ability to thrive in a high-pressure, on-site environment in Mumbai, demonstrating the agility to adapt to shifting regulatory landscapes and organizational priorities.

- A solid educational background in Computer Science, Information Technology, or a related field, complemented by 9 - 15 years of progressive experience in the security domain.