Information Security and GRC Lead

Does working for 150+ million children of Bharat excite you?

Then this opportunity is for you!

About us:

ConveGenius is an AI-native education infrastructure company transforming how governments, enterprises, and social institutions deliver learning and governance outcomes at population scale. Operating across B2G and B2B segments, the company partners with state governments, CSR funders, philanthropies, and social enterprises to build intelligent education ecosystems that are both impactful and commercially sustainable.

At its core, ConveGenius runs two synergistic business lines:

• SwiftAI - the intelligence and automation layer that powers citizen engagement, governance efficiency, and real-time decision-making for governments and institutions.
• SwiftSchool - the learning infrastructure layer that integrates adaptive learning, digital classrooms, and analytics to drive measurable student and system outcomes.

This dual-engine model enables ConveGenius to serve as the technology backbone for education reform - connecting classrooms, communities, and command centres through a unified AI-powered framework. Unlike traditional edtech companies that deliver content, ConveGenius builds infrastructure - platforms that integrate deeply into public delivery systems while enabling private and philanthropic partners to scale their missions with measurable results.

With operations across 22+ Indian states and partnerships with multilaterals, CSR alliances, and government departments, ConveGenius has established itself as a partner-friendly enterprise trusted for aligning policy priorities with social and financial returns. Supported by institutional investors and guided by a double bottom line philosophy, the company consistently delivers impact at scale and profitability with purpose.

As ConveGenius enters its next phase of growth, it is shaping the future of AI-led public education infrastructure - where technology, partnerships, and governance intelligence converge to redefine how nations learn and thrive.

Learn more about us:https://linktr.ee/convegenius11

Role Overview: As the Information Security and GRC Lead, you will own governance, risk management, compliance, privacy, information security governance, and AI governance across platforms. You will build the enterprise GRC framework that ensures the platform meets its regulatory obligations, manages risk systematically, and embeds a security-first culture into its processes. This role is a part of 0-to-1 vertical build. The person joining should be comfortable with ambiguity, high ownership, rapid iteration, hands-on execution, team building and periods of high intensity work during the early set up phase.

Key Responsibilities:

• Build and own the enterprise GRC framework: governance structure, risk register, compliance calendar, and control library.
• Lead compliance initiatives across applicable frameworks: ISO 27001, SOC2, DPDP Act, IT Act, and government sector requirements.
• Manage audits end-to-end: internal audits, external certifications, government audits, and remediation tracking.
• Define privacy governance standards: data classification, retention policies, consent frameworks, and DPDP compliance.
• Establish AI governance frameworks in collaboration with AI security and platform teams.
• Drive policy creation, review cycles, and compliance reporting for internal and external stakeholders.
• Identify, assess, and mitigate technology, security, and operational risks across all business and engineering functions.
• Build and maintain compliance metrics, risk dashboards, and reporting frameworks for leadership and board-level visibility.
• Manage stakeholder relationships across business, technology, legal, and leadership teams on all GRC matters.

Must-have skills:

• Strong experience in Governance, Risk Management, Compliance, and Information Security programs
• Deep understanding of regulatory compliance, audit frameworks, and risk assessment methodologies
• Experience implementing security policies, controls, standards, and governance processes across large organizations
• Strong knowledge of data privacy, cybersecurity, and regulatory requirements
• Experience managing internal/external audits, compliance reviews, and remediation programs
• Ability to identify, assess, and mitigate technology, security, and operational risks
• Strong stakeholder management skills with experience working across business, technology, and leadership teams
• Experience establishing compliance metrics, reporting frameworks, and risk dashboards

What We Offer and Why You Should Join ConveGenius

At ConveGenius, we create an environment where purpose meets growth. You will be part of a mission driven organization that is transforming how learning reaches children across India, especially at scale and where it matters most.

• Work with a diverse and passionate team spread across India, bringing together people from different backgrounds, perspectives, and expertise.
• Be part of an organization with a strong on ground presence across more than two thirds of India, giving you exposure to large scale, real world impact.
• Play a meaningful role in strengthening the education ecosystem and contributing directly to learning outcomes for millions of children.
• Gain experience working at the intersection of education, technology, and public systems, building skills that are highly relevant and future focused.
• Work in a culture that values ownership, learning, and collaboration, with space to take initiative and grow professionally.
• Enjoy stability and peace of mind with employee friendly benefits, including health insurance coverage and other supportive policies.
• If you are driven by purpose, enjoy solving complex problems, and want your work to create visible impact, ConveGenius offers a place to grow while making a difference.