GRC Manager

The GRC Manager/Senior Manager is responsible for leading cybersecurity governance, risk management, compliance, and awareness programs in ZEE. This role ensures enterprise-wide risk visibility, audit readiness, regulatory compliance, and continuous improvement of the cybersecurity maturity posture. The Core Responsibilities For The Job Include The Following Risk Management and Governance: Maintain an up-to-date enterprise risk register including risk assessment, mitigation, and acceptance inputs with status. Conduct weekly reviews of enterprise and engineering risks and policy exceptions and track closure. Perform proactive risk identification through process reviews, audits, and control testing. Publish fortnightly cybersecurity and privacy risk summary reports to leadership. Track KPIs and publish dashboards indicating control maturity. Security Awareness And Training Plan and execute weekly cybersecurity awareness campaigns via email. Conduct monthly cybersecurity and privacy training for contractors. Lead quarterly ethical phishing simulations, reduce phishing failure rates and improve reporting rates. Execute industry-event-based awareness programs and annual gamified security carnival. Policies, ISMS And Process Reviews Lead annual Information Security Policy and Procedure reviews with cross-functional stakeholders. Plan and execute ISMS risk assessments and internal and external ISO 27001 audits. Review cybersecurity processes and recommend enhancement to process and control measures for improvement. Leadership Reporting And Governance Committees Prepare quarterly cybersecurity and monthly business review reports for CIO and leadership. Convene and manage Information Security and Privacy Steering Committee (ISPSC) meetings and track actions/decisions out of the meetings for closure. Audit, Compliance, And Contracts Assist the team during internal, corporate, and statutory audits. Review MSAs, NDAs, and project engagements for security obligations. Support in security and privacy compliance portal submissions. Financial And Corporate Governance Track cybersecurity budget consumption and renewals. Provide cybersecurity inputs for ESG, BRSR and Annual reporting. This job was posted by Sudeshna Mohanty from ZEE - Technology & Innovation.