Senior Manager - Cyber Risk and SAP Compliance
What makes this a great opportunity?
Suntory Global Spirits is Crafting the Spirits that Stir the World. Rooted in two centuries of family heritage, Suntory Global Spirits has evolved into the world's third-largest leading premium spirits company - where each consumer is treated like family and trusted with legacy. With our greatest assets - our premium spirits and our people - we are driving growth through impactful marketing, innovation, and an entrepreneurial spirit. Suntory Global Spirits is a place where you can Unleash your Spirit by making an impact each and every day.
Mission:
Suntory Global Spirits currently has the following position open - Senior Manager: Governance, Risk and Compliance. Working Hybrid (3 days in the Gurgaon office).
We are seeking a highly experienced Cyber Risk & Compliance leader to drive and evolve the organization's enterprise Governance, Risk, and Compliance (GRC) strategy. This role will operate as a senior advisor to leadership, ensuring cybersecurity risks are proactively managed, regulatory obligations are met, and security governance is embedded into business decision-making. The position requires a strategic thinker with hands-on execution capability, able to operate across global stakeholders, complex regulatory environments, and large-scale technology ecosystems.
Want more jobs like this?
Get Software Engineering jobs in Gurgaon, India delivered to your inbox every week.
Role Responsibilities
Strategic Risk Leadership
• Define and execute the enterprise cyber risk management strategy aligned to business objectives
• Establish risk appetite alignment and support leadership in risk-based decision making
• Maintain and evolve the enterprise cyber risk register, taxonomy, and reporting framework
• Provide regular risk posture updates and actionable insights to executive stakeholders
Governance & Framework Alignment
• Lead the design, implementation, and continuous improvement of the GRC operating model
• Ensure alignment with global standards including ISO 27001, NIST CSF, NIST 800-53, COBIT, and SOX
• Develop and maintain security policies, standards, and procedures across the organization
• Drive maturity assessments and roadmap development for cybersecurity governance
Regulatory Compliance & Assurance
• Oversee enterprise compliance programs including SOX IT controls, ITGC, and regulatory requirements
• Direct audit readiness activities and serve as primary interface for internal and external auditors
• Manage control deficiency remediation and continuous control improvement
• Monitor emerging regulatory requirements and ensure proactive compliance readiness
Third-Party & Supply Chain Risk
• Assess vendor security posture and drive risk mitigation strategies
• Partner with Procurement and Legal to embed security requirements into contracts
• Provide oversight of critical suppliers supporting business operations
Access Risk Governance
• Oversee access governance across enterprise systems, including SAP GRC controls
• Ensure robust Segregation of Duties (SoD), User Access Reviews (UAR), and privileged access management
• Advise on identity risk strategies for cloud and digital transformation initiatives
Business Resilience & Critical Asset Protection
• Ensure alignment with disaster recovery and business continuity planning
• Support resilience testing and preparedness activities
Risk Advisory & Transformation Support
• Provide cyber risk advisory for strategic initiatives, new technologies, and digital programs
• Evaluate security implications of architectural and operational changes
• Support threat prioritization and risk treatment planning
Security Culture & Awareness
• Drive enterprise-wide security awareness initiatives and behavioral change programs
• Promote accountability for risk ownership across business units
• Champion a strong security culture across the organization
Stakeholder & Leadership Engagement
• Act as a trusted advisor to senior leadership on cyber risk posture and mitigation strategies
• Collaborate with IT, Engineering, Legal, Privacy, Compliance, and business leaders globally
• Influence decisions without direct authority across a matrixed organization.
Qualifications
Desired Qualifications:
- Master's degree in information technology/Cybersecurity/Information Security, or related field
- 10+ years of progressive experience in Cyber Risk, IT Audit, Compliance, or GRC leadership roles
- Demonstrated experience building, scaling, or transforming enterprise GRC programs
- Experience with enterprise GRC platforms (e.g., KnowBe4, ServiceNow, OneTrust, LogicGate, SAP GRC)
- Deep expertise in multiple security frameworks and regulatory environments
- Proven ability to manage complex audits and executive-level reporting
- Strong strategic thinking combined with operational execution skills
- Excellent stakeholder management across technical and non-technical audiences
- Security certifications preferred (e.g., CISA, CISSP, CRISC)
- Strong analytical and technical documentation skills
Perks and Benefits
Health and Wellness
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short-Term Disability
- Long-Term Disability
- FSA
- HSA
Parental Benefits
- Birth Parent or Maternity Leave
Work Flexibility
- Flexible Work Hours
- Remote Work Opportunities
- Hybrid Work Opportunities
Office Life and Perks
- Commuter Benefits Program
- Casual Dress
- Happy Hours
- Company Outings
- Snacks
Vacation and Time Off
- Paid Vacation
- Paid Holidays
- Personal/Sick Days
- Leave of Absence
Financial and Retirement
- 401(K) With Company Matching
- Performance Bonus
- Relocation Assistance
Professional Development
- Tuition Reimbursement
- Promote From Within
- Shadowing Opportunities
- Access to Online Courses
- Lunch and Learns
Diversity and Inclusion
- Diversity, Equity, and Inclusion Program
- Employee Resource Groups (ERG)