Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA

Govern and manage risk

Own the security policy framework, risk register and exception process for the company.

Make sure every exception has an owner, a reason and an end date.

Produce cyber risk reporting for the CISO, executives and the board.

Manage third-party risk

Run vendor risk assessments, from onboarding to ongoing monitoring.

Set the rules for which suppliers need deeper review, and follow through on findings.

Keep us audit ready

Lead SOX, ISO and customer security audits, working with internal and external auditors.

Prepare EU AI Act compliance and AI governance with the AI Security Lab.

Supply the governance evidence for secure development and the EU CRA, alongside PSIRT and Legal.

Automate evidence collection and control monitoring, so audits reuse the same evidence.

Lead the site and the region

Run our offshore security site, including hiring, growth and day-to-day operations.

Act as the cybersecurity point of contact for Southeast Asia, working with local leaders and regulators.

Regular

Shift 1 (India)

Bengaluru, Karnataka, India

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.