Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA

Job Details:

Job Description:

Govern and manage risk

• Own the security policy framework, risk register and exception process for the company.
• Make sure every exception has an owner, a reason and an end date.
• Produce cyber risk reporting for the CISO, executives and the board.

Manage third-party risk

• Run vendor risk assessments, from onboarding to ongoing monitoring.
• Set the rules for which suppliers need deeper review, and follow through on findings.

Keep us audit ready

• Lead SOX, ISO and customer security audits, working with internal and external auditors.
• Prepare EU AI Act compliance and AI governance with the AI Security Lab.
• Supply the governance evidence for secure development and the EU CRA, alongside PSIRT and Legal.
• Automate evidence collection and control monitoring, so audits reuse the same evidence.

Lead the site and the region

• Run our offshore security site, including hiring, growth and day-to-day operations.
• Act as the cybersecurity point of contact for Southeast Asia, working with local leaders and regulators.

Qualifications:

• Bachelor’s degree in a technical or business-related field, or equivalent practical experience.
• 12+ years of experience in information security, risk, or compliance.
• 5+ years of experience leading GRC (Governance, Risk, and Compliance) or third-party risk teams.
• Experience managing SOX, ISO 27001, or similar audits end-to-end.

Job Type:

Regular

Shift:

Shift 1 (India)

Primary Location:

Bengaluru, Karnataka, India

Additional Locations:

Posting Statement: