GRC Lead (Governance, Risk & Compliance)

We are looking for a GRC Lead with 7–12 years of experience to drive governance, risk, and compliance initiatives across the organization.

In this role, you will be responsible for building and managing GRC frameworks, ensuring regulatory compliance, and aligning security practices with business objectives. You will work closely with leadership, security teams, and auditors to strengthen risk posture and maintain compliance across global operations.

Key Skills

• Strong expertise in Governance, Risk, and Compliance (GRC) frameworks.
• In-depth knowledge of standards such as ISO 27001, NIST, SOC 2, and GDPR.
• Experience in risk assessment, risk management, and control frameworks.
• Strong understanding of audit processes, internal controls, and compliance reporting.
• Experience with third-party risk management and vendor assessments.
• Familiarity with information security policies, procedures, and governance models.
• Strong analytical, documentation, and reporting skills.
• Excellent stakeholder management and communication abilities.

• Develop and implement GRC strategies, policies, and frameworks aligned with business goals.
• Conduct risk assessments and define mitigation strategies across systems and processes.
• Ensure compliance with global regulatory standards and security frameworks.
• Lead internal and external audits, including ISO 27001, SOC 2, and other certifications.
• Manage third-party/vendor risk assessments and compliance reviews.
• Define and monitor key risk indicators (KRIs) and compliance metrics.
• Collaborate with security, IT, and business teams to enforce governance controls.
• Prepare compliance reports, dashboards, and documentation for leadership.
• Drive awareness and training programs related to compliance and risk management.
• Continuously improve GRC processes and frameworks based on evolving threats and regulations.