Senior Manager – Governance, Risk, and Compliance (GRC)

We help the world Be Everyday Ready™

Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools — all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

Role Overview
We are seeking an experienced Senior Manager of GRC to lead and mature our Governance, Risk, and Compliance program. This role will be responsible for developing, implementing, and maintaining frameworks that ensure regulatory compliance, manage enterprise risk, and align with industry best practices. The ideal candidate will have strong leadership skills, deep knowledge of global compliance standards, and experience working in a fast-paced technology-driven environment.

Key Responsibilities:
•

Governance:
• Define and maintain GRC policies, standards, and procedures.
• Ensure alignment of GRC initiatives with business objectives and regulatory requirements.
Risk Management:
• Lead enterprise risk assessments and develop mitigation strategies.
• Monitor emerging risks and regulatory changes impacting the organization.
Compliance:
• Oversee compliance with frameworks such as SOC2, PCI-DSS, ISO 27001, GDPR, etc.
• Manage internal and external audits, ensuring timely remediation of findings.
Leadership & Collaboration:
• Partner with IT, Security, Legal, and Business teams to embed GRC practices.
• Provide guidance and training to stakeholders on risk and compliance topics.
• Work as part of the corporate ESG team
• Lead and manage the security team in combination with the IT team and other teams to resolve vulnerabilities and findings across the cloud and local device deployments.
Reporting:
• Deliver regular reports to the VP of Information Technology and Information Security.

Qualifications & Skills:
• Bachelor’s degree in Information Security, Risk Management, or related field (Master’s preferred).
• 10+ years of experience in GRC, with at least 5 years in a leadership role.
• Strong knowledge of regulatory frameworks and standards (ISO, SOC, GDPR, PCI DSS, etc.).
• Experience with GRC tools and platforms, Vanta is preferred.
• Excellent communication, stakeholder management, and leadership skills.
• Ability to work from the Bangalore office at least 3 days per week.
•
• Preferred Certifications
• •CISSP, CISM, CRISC, or similar certifications.

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.