AI Data Privacy Architect

Cognizant; Ernakulam; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Cognizant seeks a Senior GRC professional to lead Governance, Risk & Compliance across data privacy, data protection, and information security. You will develop and maintain RCMs, KRIs, and risk scoring while ensuring ongoing regulatory alignment.

Key responsibilities include evidence-based testing, policy assurance, ISO 27701/27001/37301 and PDPL compliance, and integrating privacy risks into ERM with audit readiness support.

Qualifications

• Experience leading Governance, Risk & Compliance initiatives across data privacy and information security.
• Proficient in developing RCMs, KRIs, risk scoring, and monitoring.
• Experience with ISO 27701, ISO 27001, ISO 37301, PDPL and regulatory requirements.
• Ability to integrate privacy risks into Enterprise Risk Management and audit readiness.

Responsibilities

• Lead GRC initiatives across Data Privacy, Data Protection and Information Security.
• Develop and maintain RCMs, compliance monitoring rules, KRIs, and scoring methodologies.
• Perform evidence-based testing, control assessments and policy assurance.
• Drive ISO 27701/27001/37301, PDPL implementation and compliance.
• Integrate privacy risks into ERM frameworks.
• Support risk assessments, monitoring, remediation tracking and audits.

Skills

GRC Data Compliance Risk Management

Data Privacy & Data Protection

ISO 27701 ISO 27001 ISO 37301

Policy & RCM Development

Evidence-Based Testing & Compliance

KRIs Risk Scoring Risk Monitoring

Enterprise Risk Management (ERM)

Regulatory Compliance & Audit

Job description

Job Summary

SO for M Level

Responsibilities

• Lead Governance Risk & Compliance (GRC) initiatives across Data Privacy Data Protection and Information Security domains.
• Develop and maintain Risk & Control Matrices (RCMs) compliance monitoring rules KRIs and risk scoring methodologies.
• Perform evidence-based compliance testing control assessments and policy compliance assurance activities.
• Drive implementation and compliance with ISO 27701 ISO 27001 ISO 37301 PDPL and related regulatory requirements.
• Integrate data privacy and compliance risks into Enterprise Risk Management (ERM) frameworks.
• Support data risk assessments monitoring reporting remediation tracking and audit readiness activities.

Required Skills

• GRC Data Compliance Risk Management
• Data Privacy & Data Protection
• ISO 27701 ISO 27001 ISO 37301
• Policy & RCM Development
• Evidence-Based Testing & Compliance Assurance
• KRIs Risk Scoring Risk Monitoring
• Enterprise Risk Management (ERM)
• Regulatory Compliance & Audit Management

Certifications Required

• ISO 27701 Lead Implementer/Auditor
• ISO 27001 Lead Implementer/Auditor
• CRISC CGRC CISA CISSP
• CIPP CIPM or equivalent Privacy Certifications