Manager, Information Protection

Role & responsibilities

Technical Risk Governance / Compliance:

• Perform risk-based due diligence assessments and assign security risk scores to new products and vendors based on defined criteria (e.g., criticality, data sensitivity, exposure).
• Lead organization-wide initiatives to identify, assess, and document technology risks.
• Conduct periodic and ad-hoc risk assessments across infrastructure, applications, cloud environments, and emerging technologies.
• Develop and implement risk mitigation strategies, including preventive and detective controls.
• Oversee remediation efforts to ensure timely resolution of identified risks
• Prepare and present detailed risk reports, dashboards, and insights to senior management and governance committees.
• Drive continuous improvement initiatives to enhance the organizations risk maturity and resilience.
• Communicate risk exposure, mitigation plans, and residual risks to business and technical stakeholders
• Support regulatory audits, internal audits, and compliance initiatives.

Preferred candidate profile

Candidate should have practical knowledge and understanding of risk management frameworks, methodologies, and tools (e.g., NIST, ISO 27000) & Knowledge of regulatory compliance requirements across various industries (e.g., RBI Guidelines, DPDA, GDPR, SOX, IRDAI).

Familiarity with GRC concepts, processes, and best practices, control testing, and compliance audits.

Awareness of cybersecurity principles and practices, including data protection and privacy & AI.

Understanding of IT governance and information security controls.

Minimum 5 years of experience in risk management, governance, compliance, or internal audit roles, preferably within industries like finance,or technology.

Experience with compliance frameworks such as SOX, ISO 27001 etc.

Note :

Preferred candidates from Mumbai location only. This is a work from office opportunity.