The role
Job description
JOB DESCRIPTION
Manager – Cybersecurity GRC & Project Delivery
Experience: 8–12 Years
Location: Remote
Employment Type: Full-Time
Department: Cybersecurity & Governance, Risk and Compliance (GRC)
CTC: INR 15 - 18 LPA
About the Role
We are seeking an experienced and dynamic Cybersecurity GRC professional to lead and manage multiple client engagements across Information Security, Risk Management, Compliance, and Cybersecurity Services. The ideal candidate will have strong expertise in ISO 27001 implementation, ISMS management, cybersecurity project delivery, and IT risk management, along with excellent project management and client engagement skills. The role requires independent project ownership, cross-functional coordination, timely delivery, and the ability to act as a trusted advisor to clients.
Key Responsibilities
1. Cybersecurity GRC & Compliance
Lead end-to-end ISO/IEC 27001:2022 implementation and certification engagements.
Conduct gap assessments, risk assessments, internal audits, and compliance readiness reviews.
Develop, implement, and maintain ISMS documentation, including security policies, procedures, risk registers, and Statement of Applicability (SoA).
Coordinate with certification bodies and external auditors for Stage 1 and Stage 2 audits.
Track audit findings, corrective actions, and compliance improvements through closure.
Provide advisory support on regulatory frameworks, including NIS2, GDPR, and IT risk management.
2. Cybersecurity Project & Service Delivery
Independently manage multiple cybersecurity and GRC client engagements.
Oversee and coordinate cybersecurity services, including VAPT, red teaming and security assessments, cloud security and configuration reviews, network and application security assessments, phishing simulations, and security awareness programs.
Coordinate with technical teams to ensure timely execution, quality deliverables, and remediation tracking.
Review security assessment findings and facilitate risk-based remediation planning.
3. Project Management & Delivery Governance
Manage the complete project lifecycle, from initiation and planning to execution and closure.
Develop project plans, allocate resources, define milestones, and monitor project progress.
Ensure adherence to agreed scope, timelines, budgets, and delivery standards.
Identify project risks, manage dependencies, and proactively resolve delivery challenges.
Conduct regular project reviews and prepare status reports for clients and internal leadership.
Ensure proper documentation, quality control, and continuous improvement across engagements.
4. Client & Stakeholder Management
Serve as the primary point of contact for assigned client engagements.
Manage client expectations, project communication, and stakeholder relationships.
Lead project meetings, governance reviews, and escalation discussions.
Work closely with international clients, internal delivery teams, and external partners.
Ensure client satisfaction through proactive communication and consistent service delivery.
5. GRC Tools & Team Coordination
Support implementation and enhancement of GRC platforms, preferably RSA Archer.
Understand business requirements and recommend improvements to risk and compliance processes.
Coordinate with functional and technical teams for successful project execution.
Guide team members, monitor deliverables, and ensure effective resource utilization.
Drive process standardization, operational efficiency, and delivery quality.
Required Skills & Experience
8 - 12 years of relevant experience in Cybersecurity GRC, IT Compliance, Information Security Consulting, or related areas.
Strong hands-on experience in ISO 27001 implementation, ISMS, risk management, and audit readiness.
Proven experience independently managing multiple cybersecurity or GRC engagements.
Good understanding of VAPT, red teaming, cloud security, and security assessment methodologies.
Knowledge of NIS2, GDPR, IT risk management, and security governance frameworks.
Strong project management, stakeholder coordination, and problem-solving capabilities.
Excellent verbal and written communication skills, with experience handling international clients.
Ability to manage cross-functional teams, resolve escalations, and deliver projects with minimal supervision.
Preferred Qualifications
ISO/IEC 27001 Lead Auditor or Lead Implementer certification.
PMP, PRINCE2, CISM, CISSP, or equivalent certifications.
Experience with RSA Archer or similar GRC platforms.
Prior experience working with European/Nordic clients.
Background in cybersecurity consulting or managed security services.
Ideal Candidate Profile
We are looking for a proactive, delivery-oriented professional who combines strong GRC consulting knowledge with practical project management and client engagement experience. The candidate should be comfortable taking complete ownership of client engagements, coordinating cybersecurity delivery teams, managing multiple priorities, and ensuring successful project outcomes independently.
Recruitment Search Details – Vismay Talent Solutions
Search Keywords (≤250 characters; mandatory skills only): Cybersecurity GRC, ISO 27001:2022, ISMS, risk assessment, audit readiness, cybersecurity project delivery, client engagement
Boolean (≤250 characters): ("Cybersecurity GRC" OR "Information Security") AND ("ISO 27001" OR ISMS) AND ("Risk Assessment" OR "Audit") AND ("Project Delivery" OR "Project Management")
Mandatory Shortlisting Questions
Use the following questions in the recruitment Excel tracker:
1. Do you have hands-on experience leading ISO/IEC 27001:2022 implementation and ISMS documentation (including risk register and SoA)?
Response type: Yes/No
2. How many years of relevant experience do you have in Cybersecurity GRC / Information Security Compliance?
Response type: Dropdown: 0–4 years; 5–7 years; 8–10 years; 11–12 years; 13+ years
3. Have you independently managed multiple cybersecurity/GRC client projects from initiation through closure?
Response type: Yes/No
4. Which cybersecurity assessment services have you coordinated or managed? (VAPT, Red Teaming, Cloud Security, Network/Application Security)
Response type: Checkboxes: VAPT; Red Teaming; Cloud Security; Network Security; Application Security; None
5. Do you have experience managing international clients and coordinating cross-functional cybersecurity delivery teams?
Response type: Yes/No