Cyber Security Lead – GRC & Security Operations

About the role

We are seeking a seasoned Cyber Security Lead to head our Governance, Risk & Compliance (GRC) and Security Operations functions. The role will drive security strategy, oversee a SOC, and ensure the organization meets regulatory and resilience standards.

Key responsibilities

• Coordinate internal and external audits and manage remediation activities.
• Lead SOC operations including monitoring, threat detection, incident response, and threat hunting.
• Oversee implementation and tuning of SIEM, SOAR, XDR, EDR, DLP, WAF, MFA, NAC, and firewall solutions.
• Manage enterprise vulnerability management, security posture assessments, and Zero Trust Architecture initiatives.
• Review and validate security architecture designs, HLDs, and LLDs.
• Develop and deliver cybersecurity awareness programs and mentor junior analysts.
• Create, implement, and maintain security policies, standards, and procedures.
• Monitor security events, lead incident investigation, containment, eradication, and recovery.
• Conduct risk assessments, security reviews of systems, applications, and infrastructure.
• Support design and implementation of security controls across cloud, network, endpoint, and application environments.
• Ensure compliance with ISO 27001, NIST, CIS, PCI DSS and other regulatory frameworks.
• Manage security technologies such as firewalls, endpoint protection, IAM, DLP, and email security.
• Perform threat hunting and analyze emerging cyber threats.
• Support third‑party/vendor security assessments and supply‑chain risk management.
• Develop cybersecurity metrics, dashboards, and management reports.
• Participate in business continuity, disaster recovery, and cyber resilience planning.

Required profile

• 10+ years of experience in cybersecurity, with proven leadership of security teams.
• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Strong understanding of GRC frameworks and security operations.
• Experience driving audit remediation and regulatory compliance.
• Excellent communication and mentoring abilities.

Required skills

• SIEM, SOAR, XDR, EDR
• DLP, WAF, MFA, NAC, firewalls
• Vulnerability management and assessment tools
• Zero Trust Architecture
• Security architecture review (HLD/LLD)
• Incident response and threat hunting
• ISO 27001, NIST, CIS, PCI DSS compliance
• IAM, email security solutions
• Cloud, network, endpoint, and application security controls