Data Privacy - One Trust

Cognizant; Ernakulam; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Cognizant is seeking a senior GRC professional to lead governance, risk, and compliance activities across data privacy, protection, and information security domains. The role emphasizes developing risk control matrices, KRIs, and testing programs in alignment with ISO 27701/27001/37301 and PDPL guidelines.

Responsibilities include integrating privacy risks into ERM, conducting evidence-based testing, and ensuring audit readiness with comprehensive risk remediation and monitoring.

Qualifications

• GRC and privacy knowledge across governance, risk, and compliance domains.
• Experience in building and updating risk control matrices (RCMs) and KRIs.
• Familiarity with ISO 27701, 27001, 37301 and regulatory standards.

Responsibilities

• Lead Governance Risk & Compliance initiatives across Data Privacy, Data Protection and Information Security domains.
• Develop and maintain RCMs, compliance monitoring rules, KRIs, and risk scoring methodologies.
• Perform evidence-based testing, control assessments and policy compliance activities.
• Drive implementation and compliance with ISO 27701, ISO 27001, ISO 37301, PDPL and related requirements.
• Integrate data privacy and compliance risks into Enterprise Risk Management frameworks.
• Support data risk assessments, monitoring, reporting, remediation tracking and audit readiness.

Skills

GRC Data Compliance Risk Management

Data Privacy & Data Protection

ISO 27701 ISO 27001 ISO 37301

Policy & RCM Development

Evidence-Based Testing & Compliance

KRIs Risk Scoring Risk Monitoring

Enterprise Risk Management (ERM)

Regulatory Compliance & Audit

Job description

Job Summary

SO for M Level

Responsibilities

• Lead Governance Risk & Compliance (GRC) initiatives across Data Privacy Data Protection and Information Security domains.
• Develop and maintain Risk & Control Matrices (RCMs) compliance monitoring rules KRIs and risk scoring methodologies.
• Perform evidence-based compliance testing control assessments and policy compliance assurance activities.
• Drive implementation and compliance with ISO 27701 ISO 27001 ISO 37301 PDPL and related regulatory requirements.
• Integrate data privacy and compliance risks into Enterprise Risk Management (ERM) frameworks.
• Support data risk assessments monitoring reporting remediation tracking and audit readiness activities.

Required Skills

• GRC Data Compliance Risk Management
• Data Privacy & Data Protection
• ISO 27701 ISO 27001 ISO 37301
• Policy & RCM Development
• Evidence-Based Testing & Compliance Assurance
• KRIs Risk Scoring Risk Monitoring
• Enterprise Risk Management (ERM)
• Regulatory Compliance & Audit Management

Certifications Required

• ISO 27701 Lead Implementer/Auditor
• ISO 27001 Lead Implementer/Auditor
• CRISC CGRC CISA CISSP
• CIPP CIPM or equivalent Privacy Certifications