L3 – Vulnerability Management, Risk and Compliance Lead

2 weeks ago

Mumbai, Maharashtra, India ITC Infotech Full time ₹ 12,00,000 - ₹ 36,00,000 per year

Hi, We have 4 open positions for the below role in Mumbai, Secondary location is Pune. Interested candidates can email their updated profiles to alongwith the following details: Current CTC, Expected CTC, Notice period, Preferred location: Mumbai / Pune

L3 – Vulnerability Management, Risk & Compliance Lead

Job Summary:

ITCI Cyber Security team is looking for the role which is accountable for leading the organization's end-to-end vulnerability lifecycle and aligning risk and compliance efforts with regulatory mandates such as RBI Master Directions and SEBI Cybersecurity Framework. The individual will ensure timely vulnerability detection, validation, remediation governance, and risk-based prioritization. The role also anchors all compliance readiness activities across cybersecurity, translating control gaps into actionable security initiatives while coordinating with internal and external audit functions.

Key Responsibilities:

  • Lead the overall vulnerability management lifecycle across infra and application assets (VM, risk scoring, remediation tracking).
  • Own end-to-end delivery of VM scans, validation cycles, and risk-based prioritization using tools like Tenable/Nessus.
  • Map vulnerabilities to business risk and generate executive-level dashboards with risk exposure summaries.
  • Define and maintain risk treatment plans per RBI and SEBI frameworks, coordinating with infra and app teams.
  • Conduct compliance checks, technical control validations, and support readiness for RBI/SEBI/ISO audits.
  • Perform monthly risk posture reviews, threat trend reporting, and mitigation progress evaluations.
  • Oversee gap assessments against RBI Master Direction, SEBI circulars, and DPDP data security provisions.
  • Provide expertise in documenting technical controls, ISMS artifacts, and audit trails for internal and external audits.
  • Engage with stakeholders to establish security exceptions, compensating controls, and policy deviation approvals.
  • Build and maintain GRC tools and risk registers with role-based access and automated updates.

Key Skills & Certifications:

  1. 10+ years in cyber risk management, vulnerability assessment, and compliance delivery.
  2. Strong experience with Tenable/Nessus, Qualys, and GRC tools.
  3. ISO 27001 Lead Auditor, CRISC, or CISA certified.
  4. In-depth knowledge of RBI Master Direction on IT Framework, SEBI Cybersecurity Guidelines.
  5. Strong skills in risk quantification, reporting, and policy enforcement.

  • Lead-Governance Risk and Compliance

    2 weeks ago

    Mumbai, Maharashtra, India Nayara Energy Full time ₹ 1,00,00,000 - ₹ 3,00,00,000 per year

    Job DescriptionDUTIES & RESPONSIBILITIESAREASACTIVITIES1234567LEADERSHIPGOVERNANCERISK ASSESSMENTSUPPLY CHAIN RISK MANAGEMENTAWARENESS & TRAININGPOLICY COMPLIANCEMISCELLANEOUSPerform other duties as assigned to ensure the smooth functioning of the department.Recommend programmatic and technical inputs and operate with a high degree of independence in matters...

  • Lead-Governance Risk and Compliance

    2 weeks ago

    Mumbai, Maharashtra, India NAYARA Energy Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    DUTIES & RESPONSIBILITIESAREASACTIVITIES1234567LEADERSHIPGOVERNANCERISK ASSESSMENTSUPPLY CHAIN RISK MANAGEMENTAWARENESS & TRAININGPOLICY COMPLIANCEMISCELLANEOUSPerform other duties as assigned to ensure the smooth functioning of the department.Recommend programmatic and technical inputs and operate with a high degree of independence in matters relating to...

  • Compliance Lead

    2 weeks ago

    Mumbai, Maharashtra, India Smart Edge Solutions Full time ₹ 50,000 - ₹ 23,00,000 per year

    Role : VM & Compliance LeadRole Type: PermanentJob Location: MumbaiExperience: 10+ yrs.JD below :Mandatory to have:10+ years in cyber risk management, vulnerability assessment, and compliance delivery.Strong experience with Tenable/Nessus, Qualys, and GRC tools.ISO 27001 Lead Auditor, CRISC, or CISA certified.In-depth knowledge of RBI Master Direction on IT...

  • Analyst, Cybersecurity Governance, Risk and Compliance

    2 weeks ago

    Mumbai, Maharashtra, India Ares Management Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Over the last 20 years, Ares' success has been driven by our people and our culture. Today, our team is guided by our core values – Collaborative, Responsible, Entrepreneurial, Self-Aware, Trustworthy – and our purpose to be a catalyst for shared prosperity and a better future. Through our recruitment, career development and employee-focused programming,...

  • Risk Lead

    4 days ago

    Mumbai, Maharashtra, India Millennium Management Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Risk LeadAs a Risk Lead for Equity Derivatives, you will play a key role in Millennium's Risk Management team. Your job will focus on building and improving risk frameworks, developing quantitative models, and ensuring effective risk management for equity derivatives portfolios. You'll work closely with other teams, mentor junior talent, and drive innovation...

  • L3 Email Security Lead

    2 days ago

    Mumbai, Maharashtra, India Tekskills Full time ₹ 14,40,000 - ₹ 19,20,000 per year

    Hi Everyone,We have Immediate openings for MNC Company as L3 Email Security Lead in Mumbai Location.Job Title: L3 Email Security Lead (Mimecast is mandatory)Work Location: MumbaiExperience: 6 to 8 yearsJob Description:Cyber security team is looking for responsible for architecting and managing the secure email ecosystem, protecting against phishing,...

  • Information Security Lead-8 to 1 0yrs

    6 days ago

    Mumbai, Maharashtra, India Semperfi Solutions and Services Full time ₹ 1,20,00,000 - ₹ 1,80,00,000 per year

    Information Security Lead ( 8 – 10 Year Experience) Governance Risk and Compliance Project Implementation: Oversee the implementation of information security projects, ensuring alignment with organizational goals and compliance requirements. Policy Development and Maintenance: Develop, maintain, and update information security policies to align with best...

  • Risk Compliance Manager

    1 week ago

    Mumbai, Maharashtra, India SUN INFOSYSTEMS Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    We're Hiring: Risk & Compliance ManagerLocation:BKC Mumbai, MaharashtraWe're looking for an experienced professional with a strong background ininvestment riskorpension fund risk managementto take on aRisk Officer role. The ideal candidate will bring deep expertise in regulatory compliance, risk assessment, and governance across financial and pension...

  • Manager - Risk

    2 weeks ago

    Mumbai, Maharashtra, India Equifax Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Synopsis of the Role:Risk Business Partner is responsible for providing expert challenge and oversight on the development, application and maintenance of the Risk Management frameworks across the Equifax India businesses. The role holder will have particular responsibility for delivery of the annual Risk & Control Self-Assessment plan; understanding the...

  • Vulnerability Intelligence

    2 days ago

    Mumbai, Maharashtra, India NMS Consultant Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Vulnerability Intelligence (VI):Drive the qualification and risk analysis of newly disclosed vulnerabilitiePerform exploit PoC validation when needed to assess practical riskMaintain and enhance the central VI database, enriched with (EPSS, CVSS, QVS, SG-specificscoring models, and EUVD)Define and automate workflows for:Vulnerability qualification, exposure...