Lead Infosec Engineer - GRC

Key Deliverables

• Lead readiness, surveillance, and maintenance activities for ISO 27001, ISO 27701, NIST CSF, GDPR, DPDPA, CCSS frameworks
• Drive security and privacy awareness programs including training, phishing simulations, and internal communications
• Conduct risk assessments, internal and external audits, and manage remediation processes
• Develop and manage security policies, third-party risk assessments, compliance dashboards, and reporting

Role Responsibilities

• Collaborate with stakeholders to identify, assess, and mitigate security and privacy risks
• Facilitate security assessments for mergers, acquisitions, and third-party engagements
• Mentor infosec team members and promote continuous process improvements and automation
• Communicate effectively across technical and non-technical teams to ensure compliance and security culture