Lead Information Security Analyst, ITC

Nike; Karnataka; Vor Ort; INR 3.500.000 - 4.500.000; Vollzeit

Zusammenfassung

Nike India Technology Center (ITC) seeks an experienced Lead GRC Information Security Analyst 4 to own complex GRC workstreams and mentor the team. You will partner with Global GRC and cross-functional leaders to deliver governance, risk, compliance, and recovery outcomes.

The role requires advanced GRC delivery experience, the ability to steer workstreams end-to-end, and the credibility to interact with global principals.

Qualifikationen

• 7+ years in technology risk, cybersecurity risk, IT audit, compliance, or GRC in multinational tech organizations.
• Bachelor’s degree or equivalent.
• Certifications preferred (e.g., CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI).
• Hands-on experience with ServiceNow GRC.
• Delivery across at least two GRC streams (Governance, Risk, Compliance, Technical Recovery).

Aufgaben

• Run GRC workstreams end-to-end across Governance, Risk, Compliance, and Technical Recovery.
• Coach and mentor Seniors and Analysts; guide artifacts and governance.
• Drive SOX ITGC testing readiness and risk assessments.
• Maintain risk lifecycle discipline and evidence quality in governance processes.
• Produce metrics on control effectiveness and risk closure for leadership.
• Collaborate with control owners, engineers, vendors, and cross-functional partners.

Kenntnisse

GRC delivery

Cybersecurity risk

Leadership

Risk lifecycle

Ausbildung

Bachelor’s degree

Tools

ServiceNow GRC

Jobbeschreibung

Who You’ll Work With

The Lead GRC Information Security Analyst 4 is an advanced individual contributor and workstream owner on the GRC team at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance.

Who You’ll Work With

The Lead GRC Information Security Analyst 4 is an advanced individual contributor and workstream owner on the GRC team at Nike's India Technology Center (ITC), reporting to the ITC GRC Director. This role partners with the Global GRC team in Beaverton, Oregon and cross-functional leaders across Global Technology, Internal Audit, and Finance.

Who We Are Looking For

The candidate needs to have advanced GRC delivery experience and the versatility to operate as a Lead GRC Athlete—running workstreams end-to-end across Governance, Risk, Compliance, and Technical Recovery, and rotating between them without re-hiring. This is a workstream ownership role that requires in-depth knowledge, conceptual thinking, and the credibility to work with Principals globally. The candidate provides direction and mentorship to Seniors and Analysts, advises the team on complex matters, and foresees most future implications of the solutions they implement. Solid working knowledge of SOX ITGC, NIST CSF and ISO 27001, risk lifecycle management, third-party cyber risk, DR/BCP practices, and ServiceNow GRC is essential. The candidate closes loops with artifacts and evidence and knows when to execute, when to govern, and when to upscale.

• 7+ years of professional experience in technology risk, cybersecurity risk, IT audit, compliance, or GRC in matrixed, multinational technology organizations
• Bachelor’s degree or equivalent combination of education, experience, or training
• Professional certifications strongly preferred (e.g., CISA, CRISC, CISM, CISSP, GRCP, ISO 27001 LA/LI)
• Hands‑on experience with ServiceNow GRC (or comparable platform)
• Demonstrated hands‑on delivery across at least two of four GRC streams (Governance, Risk, Compliance, Technical Recovery)

What You’ll Work On

You run GRC workstreams as a Lead GRC Athlete across Governance, Risk, Compliance, and Technical Recovery. You coach Seniors and Analysts, serve as the trusted delivery lead for the ITC Principal and Director, and partner across the global GRC organization to deliver outcomes at ITC.

• You own one or more workstreams end‑to‑end in the stream where demand is highest (Governance, Risk, Compliance, or Technical Recovery), rotating based on the stream with the longest queue
• You drive risk lifecycle discipline and risk register hygiene in ServiceNow GRC, and support policies, standards, exceptions, attestations, and governance forum cadence
• You drive SOX ITGC testing readiness and evidence quality, TPRM remediation, cybersecurity risk assessments, and DR/BCP exercise support
• You provide direction and mentorship to Senior and Analyst GRC Athletes on the workstream—unblocking issues, reviewing artifacts, and enforcing a quality bar
• You produce and interpret workstream metrics (control effectiveness, risk closure, TPRM cycle time, DR test outcomes) for Directors and Principals and recommend improvements
• You build strong working relationships with control owners, engineers, vendors, and cross-functional partners; you navigate ambiguity and competing priorities
• You identify recurring pain points, propose changes, and implement improvements with an eye to future implications for the global program