Senior Manager Digital, Cyber Security (GRC)

How does this Job align to our Strategy

This role aligns with TCPL's strategic pillar of Drive Digital and Innovation and Create Future Ready Organization by supporting cybersecurity governance, risk assessments, compliance tracking and control assurance activities. The role helps improve security maturity, strengthen compliance posture and ensure cybersecurity requirements are consistently embedded across business and technology processes.

This role operates as a cybersecurity GRC (Governance, Risk & Compliance) execution role responsible for supporting governance activities, conducting risk and control assessments, coordinating audits, tracking remediation actions and maintaining cybersecurity reporting across the enterprise.

What are the Key Deliverables in this role

Financial Outcomes

Support cost-effective cybersecurity governance by tracking risks, control gaps and remediation actions.

Help reduce business exposure from cyber risks, audit observations, non-compliance and third-party control weaknesses.

Support prioritization of remediation activities based on risk severity, business impact and compliance requirements.

Customer Service

Support business and technology teams by providing timely cybersecurity governance inputs for projects and initiatives.

Coordinate with stakeholders for risk assessments, audit evidence, compliance reviews and remediation updates.

Enable consistent cybersecurity practices across functions by supporting awareness, governance reporting and control reviews.

Internal Processes

Support implementation and maintenance of cybersecurity policies, standards, procedures and governance documentation.

Conduct cyber risk assessments, maintain risk registers and track remediation plans.

Support risk treatment, risk acceptance documentation and periodic risk reporting.

Perform control assessments and gap assessments against ISO 27001, NIST CSF and internal security requirements.

Support cybersecurity maturity assessments and monitor closure of improvement actions.

Develop and maintain cybersecurity KPI/KRI dashboards, trackers and management reports.

Coordinate evidence collection for internal audits, external audits, compliance reviews and regulatory assessments.

Track audit observations, action plans and closure status.

Support third-party cybersecurity assessments and follow up on vendor remediation actions.

Support governance reviews across IAM, vulnerability management, endpoint security, cloud security, application security, data protection and security operations.

Assist in incident governance activities, post-incident reviews and corrective action tracking.

Support privacy, business continuity, disaster recovery, cyber resilience

Innovation and Learning

Contribute to continuous improvement of cybersecurity governance processes, dashboards and reporting templates.

Support automation and standardization of GRC trackers, evidence repositories and compliance reporting.

Stay updated on cybersecurity frameworks, regulatory expectations and emerging risk areas.

Support awareness campaigns, training initiatives and security culture-building activities

What are the Critical success factors for the Role

Hands-on experience in cybersecurity governance, risk assessment, compliance coordination and audit support.

Working knowledge of ISO 27001, NIST CSF, cyber risk management and enterprise security controls.

Ability to maintain trackers, dashboards, risk registers and audit action plans with accuracy.

Strong coordination skills across IT, cyber, business, audit, privacy and third-party stakeholders.

Good analytical skills to identify control gaps, risk themes and remediation priorities.

Strong documentation and reporting skills.

Ability to follow up effectively and drive closure of actions with multiple stakeholders.

Mandatory Language Requirements (spoken), if any: English

What are the Desirable success factors for the Role

Experience in third-party risk assessments, privacy compliance, business continuity, cyber resilience or AI Governance support.

Exposure to GRC tools, security dashboards, audit management platforms or compliance automation.

Certifications such as ISO 27001 Foundation / Internal Auditor, Security+, CISA, CRISC Foundation or equivalent preferred.

Experience in a multi-function enterprise environment would be an advantage.