IT GRC Lead

DMart; Thane; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

DMart is seeking a seasoned Risk Lead to oversee Governance and Risk across Technology and Digital initiatives in India. The role requires 10–12+ years of experience in risk leadership within large retail or tech-enabled environments.

You will drive risk frameworks, policy compliance, and third-party risk assessments while collaborating with senior management to balance risk and business enablement.

Qualifications

• Bachelor's degree in IT or security field is required.
• Holding at least one security and/or GRC certification is preferable.
• Experience in retail industry is preferred to understand IT policies and standards.

Responsibilities

• Implement, review and monitor Governance and Risk programs for Technology and Digital landscape.
• Conduct independent reviews to identify risks in Digital initiatives, cloud hosting, and data security.
• Review controls related to applications, cloud and other infrastructure.
• Conduct risk identification, assessment and mitigation for IT applications and cloud infra.
• Identify, assess and mitigate third party risks.
• Risk-assess third parties prior to onboarding and during ongoing monitoring.
• Communicate risk concerns and trends to senior management for timely mitigation.

Skills

Retail risk

IT risk framework

Policy compliance

Analytics

Communication skills

Multitasking

Education

Bachelor's degree in IT or security

GRC certification preferable

Job description

EXPERIENCE

Overall 10-12 years experience or above as a Risk Lead / Head

EDUCATIONAL QUALIFICATION

1. Bachelors Degree or equivalent in IT or security related field from an accredited university.
2. Holding at least one security and/or GRC certification is preferable

KEY SKILLS AND EXPERIENCE

1. Experience in retail industry (preferable) with insight and understanding of IT policies, standards and procedures
2. Thorough knowledge in evaluation of technologies to be used and understanding risk strategies to balance risk management and business enablements
3. Ability to develop risk framework models based on best practices , industry standards, frameworks and statutory / regulatory requirements
4. Ability to assure implementation of technology polices and risk policies leading to substantive improvements in compliance within large scale companies
5. Strong analytical & problem-solving skills
6. Excellent interpersonal, communication, and presentation skills, including formal report writing experience
7. Ability to manage multiple tasks, deadlines and resolution of issues

KEY RESPONSIBILITIES

1. Implement, review and monitor Governance and Risk programs pertinent to Technology and Digital landscape of the organization
2. Conduct independent reviews to uncover risks associated with Digital initiatives, cloud hosting environment (eg: Areas like Cloud System Access , Cloud Architecture , Data Security and Integrity, Service Failover Capability, Key Mgmt etc)
3. Review appropriateness of controls related to applications, cloud and other infrastructure
4. Conduct risk identification , assessment and mitigation for newly developed IT applications , cloud infrastructure and other infrastructure
5. Ability to identify , assess and mitigate third party risks
6. Ability to risk-assess third parties prior to onboarding and as a part of continual monitoring and periodic risk assessments
7. Articulate areas of concerns , risk trends to senior mgmt. for timely identification and mitigation