Cyber GRC Manager

About Bottomline

Bottomline is a worldwide leader in business payments and cash management, boasting over 35 years of expertise and processing upwards of $16 trillion in payments every year. The company fosters innovation and customer-centric growth, aiming to reshape how businesses handle payments.

Position Overview

The Cyber Governance, Risk, and Compliance (GRC) Manager role is based in Bengaluru, India, reporting directly to the Senior Director of Information Security Governance, Risk and Compliance. This position collaborates cross-functionally with Product, Technology, Operations, Legal, Compliance, and Business units to enhance and refine Bottomline's information security, risk, and compliance frameworks.

Key responsibilities entail acting as a strategic leader in governing security policies, evaluating risks, managing compliance oversight, and leading client assurance endeavors. The role also includes the stewardship of a Cyber GRC team and a commitment to integrating emerging AI risk factors into organizational practices.

Primary Responsibilities

• Oversee the creation, upkeep, and implementation of the organization's information security governance program, aligning policies, standards, and controls with relevant regulations and frameworks such as SWIFT, NACHA, PCI DSS, NIST, and GLBA.
• Manage the cyber risk framework by maintaining the risk register, conducting assessments, guiding risk mitigation plans, and handling executive-level reporting. Review and sanction risk acceptance actions utilizing a risk-based methodology.
• Lead compliance efforts to ensure conformity with regulatory, contractual, and industry mandates; spearhead audit readiness and corrective actions within the company.
• Direct client security and compliance interactions, including due diligence, security questionnaire facilitation, contract analysis, and client assurance, offering expert guidance on information security and risk topics.
• Provide leadership to the Cyber GRC team by setting priorities, reviewing performance, allocating resources, and driving both strategic and operational goals while cultivating a culture of high performance.
• Lead initiatives around Artificial Intelligence governance, assessing AI-related risks, promoting responsible AI use, and maintaining current knowledge of AI innovations, related regulations, and industry trends to bolster security, compliance, and operational efficiency.

Qualifications and Experience

• A Bachelor’s degree in fields such as risk management, cybersecurity, or technology, or a related equivalent qualification.
• Preferred certifications include CISSP, CISM, CRISC, CISA, CGRC, or comparable credentials.
• Comprehensive understanding of regulatory and industry frameworks including SWIFT, NACHA, PCI DSS, NIST, and GLBA.
• Experience with AI governance structures, risk management for AI, and knowledge of emerging AI-related regulations.
• Proven ability to incorporate automation, analytics, and AI-driven technologies into security, risk, and compliance programs.

Additional Information

This description does not encompass all responsibilities or qualifications required by the role. Bottomline is committed to equal opportunity employment, fostering an inclusive and welcoming workplace, and supporting diverse talent at every career stage.