Governance, Risk and Compliance Engineer

MillerKnoll; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

MillerKnoll in Bengaluru, India is seeking a Governance, Risk and Compliance Engineer to centrally perform cybersecurity, privacy compliance, data governance, identity governance, and risk management functions.

The engineer will manage GRC and IAM platforms, implement APIs and automations, and collaborate with Legal, Internal Audit, Cybersecurity, and Technology teams to ensure controls and regulatory obligations are defined and implemented.

Qualifications

• Bachelor in Information Systems, Cybersecurity, or Business Administration.
• 4+ years of relevant experience in Internal Audit, Compliance, or Information Technology.
• One or more compliance certifications preferred (e.g., CIPP, CIPM, CIPT, PCIP, QSA, CISA).

Responsibilities

• Manage GRC and IAM platforms, modules, workflows, integrations, and reporting capabilities.
• Develop compliance and identity automation to improve processes and audit readiness.
• Investigate AI opportunities to improve GRC, IAM, access reviews, and compliance.
• Implement APIs and integrations for GRC/IAM across enterprise systems.
• Collaborate with partners on risk management, compliance workflows, and access governance.
• Create documentation for platform usage, administration, and recurring compliance processes.
• Train partners on GRC/IAM platforms and ensure consistent use.
• Interpret and apply laws, regulations, policies, standards to issues.
• Support consumer information access rights across units.
• Monitor systems development and operations for security and privacy compliance.
• Stay current with compliance trends and incidents; interface with Cybersecurity teams.

Skills

PCI data security

PII data security

PHI data security

RMF requirements

risk assessment

cybersecurity laws

privacy governance

data controls

information searching

effective writing

critical thinking

privacy program

cross-department collaboration

Education

Bachelor in Information Systems

Job description

Why join us?

Our purpose is design for the good of humankind. It’s the ideal we strive toward each day in everything we do. Being a part of MillerKnoll means being a part of something larger than your work team, or even your brand. We are redefining modern for the 21st century. And our success allows MillerKnoll to support causes that align with our values, so we can build a more sustainable, equitable, and beautiful future for everyone.

Why join us?

Our purpose is design for the good of humankind. It’s the ideal we strive toward each day in everything we do. Being a part of MillerKnoll means being a part of something larger than your work team, or even your brand. We are redefining modern for the 21st century. And our success allows MillerKnoll to support causes that align with our values, so we can build a more sustainable, equitable, and beautiful future for everyone.

Governance, Risk and Compliance Engineer

Purpose / Profile

The MillerKnoll Governance, Risk, and Compliance Engineer will work collaboratively with global cross-functional teams to centrally perform Cybersecurity and Privacy compliance, data governance, identity governance, and risk management functions. The engineer will have primary responsibility for managing GRC and IAM platforms, implementing APIs and automations to support cybersecurity, privacy, compliance, and access governance practices, and investigating the use of AI to improve GRC and IAM processes. This position works closely with the Legal, Internal Audit, Cybersecurity, Identity and Access Management, and Technology teams to help ensure that contractual, policy, control, procedural, legal, and regulatory obligations are effectively defined and implemented.

The engineer must be collaborative and flexible while developing solutions that meet changing cybersecurity and privacy requirements while supporting business function needs. This individual will help grow and mature risk and compliance processes to gain efficiencies and effectiveness in collaboration with all departments to ensure an acceptable risk posture for the organization.

This position requires a deep understanding of existing data protection laws and regulations, such as the EU-GDPR and CCPA/CPRA, but also be focused on broader implications of protections as a function of information/system lifecycle management and security and privacy by design.

The engineer must possess high standards of legal and business ethics and a demonstrated ability to understand technology, independently problem solve, analyze large quantities of data, and clearly summarize and communicate facts.

Essential Functions

• Manage GRC and IAM platforms and their associated modules, workflows, integrations, and reporting capabilities.
• Develop compliance and identity automation to improve business processes, reduce manual effort, and strengthen audit readiness.
• Investigate AI opportunities to improve GRC, IAM, access review, and compliance functions.
• Implement APIs and integrations for our GRC and IAM platforms and other enterprise systems to support GRC controls, access governance, evidence collection, and compliance requirements.
• Collaborate with key business partners on use cases for GRC and IAM platforms, including risk management, compliance workflows, user access reviews, identity lifecycle processes, and access governance.
• Develop documentation on how to use GRC and IAM platforms, including platform administration, workflow support, integrations, and recurring compliance processes.
• Train business partners on how to use GRC and IAM platforms effectively and consistently.
• Interpret and apply laws, regulations, policies, standards, or procedures to specific issues.
• Work cooperatively with applicable organization units in implanting consumer information access rights.
• Serve as a liaison for GRC and IAM platforms to the organization.
• Monitor systems development and operations for security and privacy compliance

Additional Functions

• Stay current with compliance news and trends relevant to the business and industry.
• Participate in providing support for compliance-related incidents.
• Interface with other business units such as Cybersecurity to communicate program status and overall compliance and training posture.
• Promote a positive security/compliance culture through knowledge sharing, influences, and conduct.
• Create and maintain role-specific documentation.
• Assist with our government, risk, and compliance projects as time permits.

Knowledge, Skills, And Abilities

• Knowledge of Payment Card Industry (PCI) data security standards.
• Knowledge of Personally Identifiable Information (PII) data security standards.
• Knowledge of Personal Health Information (PHI) data security standards.
• Knowledge of Risk Management Framework (RMF) requirements.
• Knowledge of risk/threat assessment.
• Knowledge of laws, policies, procedures, or governance relevant to Cybersecurity for critical infrastructures.
• Knowledge of external organizations and academic institutions with a cyber focus (e.g., cyber curriculum/training and Research & Development).
• Knowledge of controls related to data use, processing, storage, and transmission.
• Skill in applying confidentiality, integrity, and availability principles.
• Skill in conducting information searches.
• Ability to communicate effectively when writing.
• Ability to apply critical reading/thinking skills.
• Interpret and apply laws, regulations, policies, standards, or procedures to specific issues.
• Provide ongoing optimization and problem-solving support for GRC and IAM platforms, integrations, workflows, and reporting.
• Provide recommendations for possible improvements and upgrades.
• Ability to tailor technical and planning information to a customer's level of understanding.
• Ability to work across departments and business units to implement the organization’s privacy principles and programs and align privacy objectives with security objectives.

Qualifications

Education/Experience

• Bachelor in Information Systems, Cybersecurity, or Business administration
• 4+ years of relevant experience in Internal Audit, Compliance, or Information Technology

Licenses and Certifications

• One or more compliance certifications are preferred (e.g., CIPP, CIPM, CIPT, PCIP, QSA, CISA)

Who We Hire?

Simply put, we hire qualified applicants representing a wide range of backgrounds and abilities. MillerKnoll is comprised of people of all abilities, gender identities and expressions, ages, ethnicities, sexual orientations, veterans from every branch of military service, and more. Here, you can bring your whole self to work. We’re committed to equal opportunity employment, including veterans and people with disabilities.

MillerKnoll complies with applicable disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact MillerKnoll Talent Acquisition at [e-mail].