• Implementing and managing the cyber governance, risk, and compliance (GRC) process as per ISO 27001, ISO 27701, SOC1, SOC 2, GDPR, CPRA etc • Developing and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks • Building and driving a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets. • Leading cybersecurity operations and implementing disaster recovery protocols and business continuity plans with business resilience in mind • Conduct regular internal audits in compliance with applicable legal and contractual requirements, ISO 27001, ISO 27701, SOC 1, SOC 2, GDPR and PCI DSS requirements. • Lead Third party part risk assessment process and monitor the risks identified during the TPRA. • Handled external audits single-handedly as per ISO 27001, ISO 27701, SOC 1, SOC 2 & PCI DSS • Leading RFP’s, RFI’s, SIG, CAIQ, Trust portal management and other customer onboarding/TPRA processes. • Reporting to the most senior levels of the organization (the CEO and board of directors, or equivalent) • Implementation of IT-GRC tools for automating the processes. For ex – JIRA, ZIP HQ, Vanta, Sprinto, TAP, Heylaika, Akitra, Securit AI etc.. • Conducting the Data Privacy Impact Assessment (DPIA) & Records of Processing Activities (RoPA) • Handling Annual Risk assessment/Annual Risk assessment