Cyber GRC & Privacy Lead

We're Hiring | Cyber GRC & Privacy Lead

Location: Mumbai (Work From Office)Experience: 5–10 YearsIndustry: FinTech / Cryptocurrency ExchangeWe are looking for an experienced Cyber GRC & Privacy Lead to drive cybersecurity governance, risk management, regulatory compliance, and data privacy initiatives in a fast-paced FinTech environment.

Key Responsibilities

Lead cybersecurity Governance, Risk & Compliance (GRC) initiatives.Drive compliance with ISO 27001:2022, India's DPDP Act, CERT-In, and applicable RBI/SEBI guidelines.Conduct enterprise-wide cybersecurity risk assessments and manage risk mitigation plans.Manage internal and external security audits, compliance assessments, and remediation activities.Lead Third-Party Risk Management (TPRM) and vendor security assessments.Collaborate with Security, DevOps, Infrastructure, Legal, and Product teams to strengthen security and privacy controls.Develop compliance dashboards, risk reports, and security awareness initiatives.Required Skills & Experience:5–10 years of experience in Information Security, Cyber GRC, IT Audit, or Data Privacy.Strong hands-on expertise in ISO 27001, DPDP Act, risk assessments, and compliance audits.Understanding of cloud security (preferably AWS), ITGC, SaaS environments, and NIST frameworks.Experience in vendor risk management, security controls, and regulatory compliance.Strong stakeholder management, communication, and documentation skills.

Preferred Qualifications

Certifications such as CISA, CISM, CISSP, CDPSE, or ISO 27001 Lead Auditor/Implementer.Prior experience in FinTech, cryptocurrency exchanges, digital banking, or other regulated financial environments.Knowledge of blockchain technology and digital asset security is an added advantage.