Job Details: Job Description: Govern and manage risk • Own the security policy framework, risk register and exception process for the company. • Make sure every exception has an owner, a reason and an end date. • Produce cyber risk reporting for the CISO, executives and the board. Manage third-party risk • Run vendor risk assessments, from onboarding to ongoing monitoring. • Set the rules for which suppliers need deeper review, and follow through on findings. Keep us audit ready • Lead SOX, ISO and customer security audits, working with internal and external auditors. • Prepare EU AI Act compliance and AI governance with the AI Security Lab. • Supply the governance evidence for secure development and the EU CRA, alongside PSIRT and Legal. • Automate evidence collection and control monitoring, so audits reuse the same evidence. Lead the site and the region • Run our offshore security site, including hiring, growth and day-to-day operations. • Act as the cybersecurity point of contact for Southeast Asia, working with local leaders and regulators. Qualifications: • Bachelor’s degree in a technical or business-related field, or equivalent practical experience. • 12+ years of experience in information security, risk, or compliance. • 5+ years of experience leading GRC (Governance, Risk, and Compliance) or third-party risk teams. • Experience managing SOX, ISO 27001, or similar audits end-to-end. Job Type: Regular Shift: Shift 1 (India) Primary Location: Bengaluru, Karnataka, India Additional Locations: Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.