Head - Information Security, GRC & Data Privacy
First seen by Alion on Oct 16, 2026.
Job Opening: Head - Information Security, GRC & Data Privacy
Location: Delhi / Bhopal
Job Type: Full-Time, Onsite
Experience: 5 - 10 Years
Industry: Group of Companies / University
Job Summary:
We are seeking an experienced professional to lead Information Security, Governance, Risk & Compliance (GRC), and Data Privacy across group companies and the university. The role will focus on cybersecurity governance, DPDPA compliance, IT risk management, audits, and implementation of security and privacy frameworks.
Key Responsibilities:
- Develop and implement information security policies, governance frameworks, and cyber risk management practices.
- Lead compliance with the Digital Personal Data Protection Act (DPDPA) and applicable privacy regulations.
- Manage IT GRC programs and compliance with ISO 27001, SOC 2, NIST, and other relevant frameworks.
- Oversee internal and external IT audits, risk assessments, vulnerability management, and remediation.
- Conduct third-party/vendor security assessments and monitor cloud and SaaS security.
- Establish data privacy controls, risk registers, and security awareness programs.
- Coordinate with IT teams across group companies and the university to strengthen security and compliance.
Eligibility Criteria:
- 5 - 10 years of relevant experience in Information Security, Cybersecurity, IT Risk, GRC, or Data Privacy.
- Experience in DPDPA/GDPR compliance, ISO 27001, security audits, and risk management.
- Exposure to cloud security, SaaS platforms, and third-party risk management.
- Certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent will be preferred.
Application: Interested candidates can apply with their updated CV.
Skills
Information Security, IT Risk Management, IT Compliance, Cyber Security, Data Privacy, CISA, CISM, IT Audit, IT Security