Lead GRC Professional

Description :

About the Role :

We are looking for an experienced Senior Lead Governance, Risk & Compliance (GRC) professional with strong expertise in enterprise risk management, information security governance, business continuity planning, and

cybersecurity compliance frameworks.

The ideal candidate should possess hands-on experience in conducting operational, strategic, financial, and security risk assessments while driving enterprise governance and resilience initiatives aligned with global security standards.

This role requires strong leadership capabilities, stakeholder management skills, and the ability to drive organization-wide risk, compliance, and security governance programs.

Key Responsibilities :

- Lead and manage enterprise Governance, Risk & Compliance (GRC) initiatives across business and technology functions.

Drive Internal Governance programs including :

- Risk & Control Assessments

- Business Impact Analysis (BIA)

- Business Continuity Planning (BCP)

Conduct :

- Operational Risk Assessments

- Strategic Risk Reviews

- Financial Risk Assessments

- Information Security Risk Assessments

Perform security and access control reviews covering :

- Identity & Access Management (IAM)

- Role-Based Access Control (RBAC)

- User Access Governance

- Privileged Access Reviews

Assess and strengthen enterprise security posture across :

- Network Security

- Application Security

- Data Security

Lead :

- Threat Modeling Exercises

- Vulnerability Assessments

- Risk Mitigation Planning

- Security Governance Reviews

Ensure compliance and alignment with industry-standard frameworks including :

- NIST

- ISO 31000

- COBIT

- MITRE ATT&CK

Utilize ITSM and governance tools such as :

- ServiceNow

- Jira

- Remedy

- Prepare governance dashboards, analytical reports, and executive-level risk presentations.

- Collaborate with cross-functional teams to drive remediation tracking and governance compliance.

- Support audit readiness, policy governance, and continuous risk improvement initiatives.

Required Skills & Qualifications :

8-13 years of experience in :

- Governance, Risk & Compliance (GRC)

- Information Security

- Enterprise Risk Management

- Security Governance

Strong expertise in :

- BIA & BCP

- Risk & Control Frameworks

- Security Governance

-Threat & Vulnerability Management

Strong understanding of :

- IAM

- RBAC

- Access Control Mechanisms

- Information Security Principles

Good knowledge of :

- Network Security

- Application Security

- Data Security Fundamentals

Hands-on experience with security and governance frameworks :

- NIST

- ISO 31000

- COBIT

- MITRE

Experience working with ITSM tools such as :

- ServiceNow

- Jira

- Remedy

- Strong analytical, reporting, and stakeholder management skills.

- Excellent communication, problem-solving, and governance capabilities.