Manager, Risk Manager, Cyber security (GRC)

Position Title : Risk Manager, Cyber Security, ACG Group Organization Context: Position Title:Risk Manager, Cyber Security, ACG Group Grade :M-05 Department:Corporate Information Technology Location:Jogeshwari, Mumbai Reports to:Head, Cyber Security, ACG Group ACG is the world's only integrated pharma manufacturing solutions company. We are headquartered in Mumbai , India. ACG has a presence in over 100 countries with its products and services that strive to provide world-class technology across multiple domains. We offer a complete range of solutions beginning with empty capsules; granulation and tablet coating; capsule filling; tabletting; packaging films; blister packing and carton packing to the end-of-line solutions and track and trace systems. We have an opportunity in ACG Corporate of a Risk Manager, Cyber Security, ACG Group. Job Objective Strengthen enterprise cyber risk governance Drive proactive risk identification & mitigation Enhance risk monitoring & reporting Improve cyber resilience & compliance Strengthen third party / supply chain cyber risk management Improve cyber risk awareness Advance AI enabled cyber risk intelligence & analytics Primary responsibilities Conduct enterprise-wide cyber risk assessments covering IT, cloud, OT, applications, and third-party environments to identify and evaluate security risks. Maintain and update the cyber risk register, ensuring risks are documented, prioritized, tracked, and periodically reviewed with relevant stakeholders. Monitor implementation of risk mitigation and remediation actions, and coordinate with technology and business teams to ensure timely closure of identified gaps. Develop and present cyber risk dashboards, KRIs, compliance reports, and management updates for leadership and governance forums. Review cybersecurity policies, standards, and control frameworks to ensure alignment with regulatory requirements, industry best practices, and organizational objectives. Support cyber incident response, business continuity, audit activities, and vendor risk assessments by providing risk analysis, impact evaluation, and recommendations for resilience improvement. Key Result Areas Effectiveness of enterprise cyber risk identification, assessment, prioritization, and governance processes Timely closure of identified cyber risks, vulnerabilities, audit findings, and control gaps Accuracy, timeliness, and quality of cyber risk dashboards, KRIs, executive reports, and risk insights Adherence to cybersecurity policies, standards, and internal control frameworks, including audit readiness and compliance tracking. Assessment and ongoing monitoring of cybersecurity risks associated with vendors, service providers, and external partners. Contribution to incident response preparedness, business continuity planning, crisis coordination, and post-incident risk evaluation activities. Adoption of automation, threat intelligence, AI-enabled analysis, and process improvements to enhance cyber risk visibility and operational efficiency. Key Interfaces Internal InterfacesExternal Interfaces ACG IT Team ACG Businesses Security Vendors Security Consultants ACG Persona Persona LevelCompetencyLevel Decision Making, Security frameworks, Problem Solving, Risk & Threat Management, Cross functional teamwork, Security tools & technologies, Communications, Compliance management, Deliver consistent results, Vendor Management, Persona Innovator, Persona Partner 4 Educational and Experience Requirements Minimum Requirement Desired Level of Education Bachelors + InfoSec certs such as ISO 27001 Lead Auditor or ISO 27001 Lead Implementer Masters + InfoSec certs such as CRISC, CISSP, CISA / CISM. Experience 8+ years 10-12 years .